CVE-2021-4034

CVE-2021-4034 PolKit Local Privilege Escalation Analysis toc Vulnerability Overview Vulnerability ID: CVE-2021-4034 Vulnerability Score: Affected Product: linux PolKit pkexec Affected Versions: Versions from 2009 to present current 0.105 Reference http://its.dlut.edu.cn/info/1054/78309.htm Exploi...

DevHub-HTB-Walkthrough

DevHub – HTB Walkthrough Medium Linux Machine: DevHub Difficulty: Medium OS: Linux Topics: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root Privilege Escalation 📌 1. Reconnaissance nmap -sC -sV devhub.htb Result: Port 22 SSH Port 80 HTTP Port 6274 MCPJam Inspector 📌 2. Edit Hosts File...

mks-copy-fail-mitigation

Copy Fail Mitigation DaemonSets DaemonSets for fixing vulnerabilities of the Copy Fail family on all worker nodes of MKS clusters. Contents CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Vulnerability Description CVE ID: CVE-2026-31431 CVE...

CVE-2022-21882

CVE-2022-21882 win32k LPE bypass CVE-2021-1732 Test only tested on windows 20h2 19042.1415 tested on windows 21H1 not working Download https://raw.githubusercontent.com/David-Honisch/CVE-2022-21882/main/x64/Release/CVE-2021-1732.exe Many thanks to Kalendski. Based on:...

vulns

vulnerability reports HN Security's advisories. https://hnsecurity.it/ Solaris HNS-2022-01-dtprintinfo. Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm CVE-2022-46285, CVE-2023-24039, CVE-2023-24040. Zyxel HNS-2022-02-zyxel-zysh. Multiple vulnerabilities in Zyxel zysh...

CVE-2018-8581

CVE-2018-8581 This is a lateral movement and privilege escalation vulnerability at the mailbox level Once you have the credentials of an ordinary mailbox account, it allows you to delegate and take over the inboxes of other users including domain administrators This EXP script is an enhanced...

vScalation-CVE-2021-22015

vScalation CVE-2021-22015 Local Privilege Escalation in VMWare vCenter Pentera’s research group discovered a vulnerability in VMWare’s vCenter Server program affecting VMWare’s software installed in 500,000 organizations worldwide responsible to manage their most critical systems Our findings wer...

raptor_infiltrate20

raptorinfiltrate20 "Bugs are by far the largest and most successful class of entity." -- Encyclopedia of Animal Life This repository contains all materials related to my talk "The INFILTRATE effect: 6 bugs in 6 months" presented at INFILTRATE20 on January 26, 2021. Related links...

Linux-Privilege-Escalation-CVE-2025-27591

CVE-2025-27591 - Privilege Escalation via Writable Symlink in below Summary This is a simple exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below Linux system monitoring tool. The vulnerability affects versions prior to v0.9.0 and stems from incorrect permission...

CVE-2026-46215-exploit-linux-7.0-uaf-stable

CVE-2026-46215 Exploit for Linux 7.0 - More Stable & Reliable c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity This exploit works in a limited environment, check some requirements below !!! WHAT THE HELL IS THIS ? This is an exploit for...

CVE-2026-43499-root-KernelSU

CVE-2026-43499-root-KernelSU A local privilege escalation adaptation based on kernel vulnerability CVE-2026-43499, with embedded KernelSU integrated. It compiles to produce preload.so; upon successful exploitation, KernelSU will be started in late-load mode jailbreak mode. Supports generating...

CVE-2019-19268

CVE-2019-19268 Affected Version: rConfig 3.9.2. Description Multiple attack vectors in rConfig v3.9.2 due to misconfiguration, which allows local users to execute root commands via sudo. Discoverers dmw0ng - Discord: dmw0ng4449 TheCyberGeek - Discord: TheCyberGeek1892 Email: [email protected]...

WordPress Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin <= 2.10.6 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by crow in WordPress Plugin Bit Integrations versions = 2.10.6...

CVE-2026-53420

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access...

CVE-2026-53420

A buffer overflow vulnerability exists in a Zoom Phone feature within Zoom Workplace Clients . This issue, categorized as CWE-120 (Buffer Copy without Checking Size of Input), could allow an unauthenticated user to perform an elevation of privilege via network access . The CVSS 3.1 score is 8.0 (...

WordPress Membership & User Roles for WooCommerce (Automatic Role Changer) plugin <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache vulnerability

Authenticated Subscriber+ Privilege Escalation to Stale Foreign Role Cache vulnerability discovered by Azgnt in WordPress Plugin DFX Automatic Role Changer for WooCommerce versions = 20260828...

CVE-2022-25636

CVE-2022-25636 netfilter Kernel Privilege Escalation toc Vulnerability Overview Vulnerability ID: CVE-2022-25636 Product: linux kernel - netfilter Affected versions: linux kernel 5.4 Impact: Heap out-of-bounds write in the netfilter kernel module, can lead to privilege escalation when SYSADMIN is...

CVE-2025-47962-POC

CVE-2025-47962-POC Reproduction process： i686-w64-mingw32-gcc -shared -o CRYPTBASE.dll poc.c -lkernel32 copy CRYPTBASE.dll "C:\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\CRYPTBASE.dll" net stop IpOverUsbSvc net start IpOverUsbSvc Explanation： IpOverUsbSvc sc.exe qc IpOverUsbSvc SERVICENAME:...

CVE-2026-65199

Huawei openUBMC contains a privilege escalation vulnerability where it assigns a full administrative privilege set to pseudo-identities representing SNMP callers . Specifically, in route_mapper/account.lua, the get_user_privilege function returns a complete nine-privilege set for a special_users ...

cve-2021-34527

CVE-2021-34527 CVE-2021-34527 LPE exploit using AddPrinterDriverEx - this is a weaponized version of the LPE that can be used to escalate a DLL to SYSTEM and will also clean up artifacts. The LPE impacts Windows Desktop 7,8,8.1,10,11 & Server 2008,2012,2016,2019. This visual studio project will...