291159 matches found
CVE-2023-39063
CVE-2023-39063 This repository contains an exploit for the vulnerability CVE-2023-39063 found in the RaidenFTPD v2.4.4005 software. The exploit has been created to work with Python 3. Exploit Details Python 3 code to exploit a SEH based Buffer Overflow vulnerability in RaidenFTPD v.2.4.4005. This...
CVE-2020-0796
CVE-2020-0796 Windows SMBv3 LPE Exploit Authors Daniel GarcΓa GutiΓ©rrez @danigargu Manuel Blanco ParajΓ³n @dialluvioso References https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796 https://www.synacktiv.com/posts/exploit/im-smbghost-daba-dee-daba-da.html...
CVE-2021-4034
CVE-2021-4034 Polkit PoC What is Polkit? Policy Toolkit or Polkit since its release in 2009 allows any attacker without root permissions to easily obtain administrative access over any Linux system with the Polkit package. Unfortunately or not, it is installed by default in most Linux...
CVE-2024-32019-POC
β οΈ CVE-2024-32019 - PoC π Affected Versions = v1.45.0, = v1.44.0-60, v1.45.0-169 π οΈ Proof of Concept CVE-2024-32019 β ndsudo local privilege escalation via untrusted search path. π§ Compile the Exploit x8664-linux-gnu-gcc -o nvme exploit.c -static π€ Deploy on Target Machine 1. Transfer the compiled...
CVE-2026-92877
The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...
EUVD-2026-97469
The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...
CVE-2026-92877
The JAXB factory methods are vulnerable to XML External Entity (XXE) resolution because they historically relied exclusively on the FEATURE_SECURE_PROCESSING flag. On JAXP implementations where this feature does not sufficiently block external entities, an attacker capable of providing untrusted ...
bazad5
bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...
CVE-2023-4911-PoC
GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911 Overview The GNU C Library glibc serves as the C library in the GNU system and is integral to Linux-based systems. At its core, glibc defines essential functionalities for programs, including system calls and common functions like open,...
ptrace_may_dream
ptracemaydream CVE-2026-46333 Local privilege escalation exploit for the ptracemayaccess mm=NULL race condition in pidfdgetfd2. When a process is dying and its mm has already been released, the kernel skips the ptrace access check entirely. By racing pidfdgetfd against process exit, an unprivileg...
EPScalate
EPScalate An elevation of privilege vulnerability in QuickHeal's Seqrite Enterprise Endpoint Security Solution EPS. The vulnerability has been assigned a CVE ID of CVE-2023-31497. https://user-images.githubusercontent.com/39941993/230790056-87157751-b96c-49a6-81df-bf3126acfbd6.mp4 Vendor and...
CVE-2021-3560
CVE-2021-3560 Privilege escalation via race condition in polkit. Vulnerability Description CVE-2021-3560 is a race condition in polkit that allows an unauthenticated local user to gain root privileges. The vulnerability exists in the way polkit handles D-Bus errors when a connection is terminated...
CVE-2026-43499-popsicle
CVE-2026-43499 for popsicle This repository contains an Android 16 local privilege escalation implementation for CVE-2026-43499 on Xiaomi 17 Pro Max popsicle. Verified kernel: 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k Devices with this kernel Xiaomi 17, Pro, and Ultra series have all...
CVE-2020-14974
CVE-2020-14974 A simple POC that demonstrates A vulnerability found in IObitUnlocker 1.1.2 that leverages IOCTL codes found it its vulnerable driver IObitUnlocker.sys, providing ability to unlock, delete, rename, copy, and move running files as a low privileged user. Resources...
CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-
Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...
aco-prompt-shield
aco-prompt-shield π‘οΈ Stop prompt injection attacks before they reach your LLM β zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the 1 security risk for LLM applications. aco-prompt-shield catches known jailbreak patterns, understands semantic intent via ML, and...
CVE-2019-12181
CVE-2019-12181 LPE Exploit For CVE-2019-12181 Serv-U FTP 15.1.6...
CVE-2026-46331
π¨ CVE-2026-46331 - Linux Kernel COW Bug Linux Kernel net/sched Partial Copy-on-Write COW Page Cache Corruption -orange?style=for-the-badge A Linux kernel vulnerability caused by incorrect Copy-on-Write COW handling in the traffic control tc packet editing subsystem. π Overview CVE-2026-46331 is a...
CVE-2022-0847
Information Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Date: 03/07/2022 Exploit Author: Max Kellermann Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 How to Exploit Tes...
CVE-2024-55504
CVE-2024-55504 An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS Reproduce From Terminal...