cve-lfi-lab

🧠 CVE Lab: Tier 1 SOC Analyst Simulation CVE-2025-39507 | Local File Inclusion in WordPress Nasa Core Plugin 📝 Scenario: A Day in the SOC It’s a regular Monday. I’m logged into the SOC dashboard, reviewing alerts like usual. One comes in that catches my eye: ALERT: Possible Local File Inclusion L...

DirtyFrag

Local Privilege Escalation / Container Escape CVE-2026-43284 / CVE-2026-43500 Usage: CGOENABLED=0 go build -ldflags="-s -w" -o dirtyfrag . ./dirtyfrag Affected Versions: Ubuntu 24.04.4 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS 14.04 LTS RHEL 8.x,9.x,10.1 CentOS 8,9,10 Rocky Linux 8,9,...

CVE-2026-0073-Android-adbd-authentication-bypass

Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should wo...

CVE-2026-98385

A flaw was found in the Linux kernel. A race condition when switching memory management contexts allows the process scheduler to access memory that has already been freed, leading to a use-after-free condition. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by...

CVE-2023-3897

CVE-2023-3897 Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

CVE-2026-38765

CVE-2026-38765 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-38764

CVE-2026-38764 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

CVE-2026-31431_je_sappelle_RoOt

CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! 📌 Repository Purpose This repository documents the CVE-2026-31431 vulnerability, nicknamed Copy Fail , and provides a defensive remediation procedure for potentially exposed Linux systems. ⚠️ This repository is strictly focused on defense, authorize...

CVE-2024-1086-Exploit

🔒 CVE-2024-1086 Exploit Project 🛡️ Polished educational Linux kernel exploit for security research This project provides a robust, non-functional template for studying CVE-2024-1086, a use-after-free vulnerability in the Linux kernel's netfilter: nftables component, enabling local privilege...

CVE-2023-31716

CVE-2023-31716 Name Affected product: FUXA Version affected: = 1.1.12 Problem: Local File Inclusion Description: FUXA 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...

CVE-2026-23111-nftables-lab

CVE-2026-23111 nftables LPE: exposure check and safe lab Defensive tooling and a reproducible virtual-machine lab for CVE-2026-23111, the nftables use-after-free local privilege escalation in the Linux kernel an inverted element-activity check in nftmapcatchallactivate, the "off by !" bug. An...

CVE-2025-65320

CVE-2025-65320 Title Cleartext Storage of Sensitive Licensing Material in Process Memory in Abacre Restaurant Point of Sale POS Overview A vulnerability exists in Abacre Restaurant Point of Sale POS versions = 15.0.0.1656 where sensitive licensing data is stored in cleartext in process memory...

CVE-2025-27519

Below Privilege Escalation Exploit CVE-2025-27519 This repository contains a proof-of-concept PoC Bash script to exploit the Below privilege escalation vulnerability CVE-2025-27519 on Linux systems. The exploit allows a local user to escalate privileges to root by abusing the way the below binary...

Adaptive_Greedy_Local_Search

Adaptive Greedy Local Search AGLS Semantic-Preserving Prompt Hijacking: A Black-Box Adversarial Attack on Auto-Prompt Optimization ICME 2026 Abstract: Large Language Models LLMs are increasingly equipped with automatic prompt-optimization modules that rewrite the user’s input and explicitly prese...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4-byte XFRM/ESP Proof-of-concept local privilege escalation via XFRM/ESP page-cache corruption 4-byte write primitive · 48 iterations · 192-byte ELF overwrite · unprivileged user + netns Proof of concept Left: kernel preflight, setuid scan, and exploit chain · Right: root shell...

ExploitVelotiSmart

ExploitVelotiSmart Allows exploiting the LFI vulnerability CVE-2018-14064 https://medium.com/@s1kr10s/velotismart-0day-ca5056bcdcac https://www.exploit-db.com/exploits/45030/...

rewolf-msi-exploit

rewolf-msi-exploit MSI NTIOLib/WinIO Local Privilege Escalation More info can be found here: http://blog.rewolf.pl/blog/?p=1630...

LGPwn

LGPwn LG Root Exploit Author: [email protected] Special Thanks: Juggie, for pointing out an odd binary in an update spritebud, that lead to me finding this vulnerability. Subject: Race condition in Sprite Software?s backup software, installed by OEM on LG Android devices. CVE ID: CVE-2013-36...