291186 matches found
CVE-2025-27519
Below Privilege Escalation Exploit CVE-2025-27519 This repository contains a proof-of-concept PoC Bash script to exploit the Below privilege escalation vulnerability CVE-2025-27519 on Linux systems. The exploit allows a local user to escalate privileges to root by abusing the way the below binary...
Adaptive_Greedy_Local_Search
Adaptive Greedy Local Search AGLS Semantic-Preserving Prompt Hijacking: A Black-Box Adversarial Attack on Auto-Prompt Optimization ICME 2026 Abstract: Large Language Models LLMs are increasingly equipped with automatic prompt-optimization modules that rewrite the userโs input and explicitly prese...
CVE-2026-43284-DirtyFrag-PoC
CVE-2026-43284 โ 4-byte XFRM/ESP Proof-of-concept local privilege escalation via XFRM/ESP page-cache corruption 4-byte write primitive ยท 48 iterations ยท 192-byte ELF overwrite ยท unprivileged user + netns Proof of concept Left: kernel preflight, setuid scan, and exploit chain ยท Right: root shell...
ExploitVelotiSmart
ExploitVelotiSmart Allows exploiting the LFI vulnerability CVE-2018-14064 https://medium.com/@s1kr10s/velotismart-0day-ca5056bcdcac https://www.exploit-db.com/exploits/45030/...
rewolf-msi-exploit
rewolf-msi-exploit MSI NTIOLib/WinIO Local Privilege Escalation More info can be found here: http://blog.rewolf.pl/blog/?p=1630...
LGPwn
LGPwn LG Root Exploit Author: [email protected] Special Thanks: Juggie, for pointing out an odd binary in an update spritebud, that lead to me finding this vulnerability. Subject: Race condition in Sprite Software?s backup software, installed by OEM on LG Android devices. CVE ID: CVE-2013-36...
CVE-2026-31431
CVE-2026-31431 "Copy Fail" - Research & Pentesting Tool โ ๏ธ DISCLAIMER This project is provided strictly for: Security research Educational purposes Authorized penetration testing CTF and laboratory environments By using this tool, you agree that: You own the target system or You have explicit...
CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability
CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview Code-Projects...
CVE-2021-1675---PrintNightmare-LPE-PowerShell-
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...
CVE-2023-43874-e107-CMS-Stored-XSS---MetaCustomTags
e107 CMS Stored XSS v2.3.2 Author: Sergio Description: Multiple Cross Site Scripting XSS vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Copyright and Author fields in the Meta & Custom Tags Menu. Attack Vectors: Scripting A...
CVE-2024-50986
CVE-2024-50986: DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementine v.1.3.1 Researcher: Utkarsh r1971d3 LinkedIn NIST CVE Link:...
CVE-2024-48990
CVE-2024-48990 POC Overview Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable. This repository contains a...
StrandHogg2
StrandHogg2 Poc for StrandHogg2 CVE-2020-0096 Information of the original vulnerability Current Description In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional...
CVE-2026-39808
cve-id โก Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...
CVE-2024-30051
CVE-2024-30051 โ Windows DWM Heap Overflow EoP ยท Master's Thesis Research -orange Heap-based Buffer Overflow in Windows Desktop Window Manager dwmcore.dll Local Privilege Escalation โ Integrity Level SYSTEM via DWM process Build target: Windows 11 22H2 10.0.22621.3447 ยท Patch: KB5037771 Descripti...
CVE-2026-43284
Dirty Frag: Universal Linux LPE Abstract This document explains the Dirty Frag vulnerability class, discovered and reported by Hyunwoo Kim @v4bel. By chaining xfrm-ESP Page-Cache Write CVE-2026-43284 with RxRPC Page-Cache Write CVE-2026-43500, an attacker can escalate to root on major Linux...
CVE-2026-21125
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...
CVE-2026-21124
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...