Mindmaps

Pentesting Azure Mindmap Get the Global Admin access 💥 with this mindmap for Azure penetration tests. Feel free to pull request with your techniques ! ❤️ Developed by Alexis Danizan Released as open source by Synacktiv 🥷 📖 Resources Useful resources used to build this mindmap, many outstanding...

CVE-2023-36424

Information ============== Windows Kernel Pool clfs.sys Corruption Privilege Escalation. CVE-2023-36424 This repo contains technical analysis & working exploit. Author: Nassim Asrir @p1k4l4 || https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vulnerability ================ There is a pool...

CVE-2024-54379

CVE-2024-54379 Minterpress = 1.0.5 - Missing Authorization to Authenticated Subscriber+ Arbitrary Options Update Description The Minterpress plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on a functio...

CVE-2022-0847

Información Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 Cómo explotar Escalada de privilegios local gcc exploit.c -o explo...

CVE-2023-30765

CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronics Infrasuite Device Master Privilege Escalation Bug credit: Piotr Bazydlo @chudypb Links: https://www.zerodayinitiative.com/advisories/ZDI-23-905/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01 Usage python3...

CVE-2024-34474

CVE-2024-34474 Clario hasta el 11 de abril de 2024 para Windows Desktop tiene permisos débiles para %PROGRAMDATA%\Clario e intenta cargar DLLs desde allí como SYSTEM. Descripción: Clario para Windows desktop intenta cargar bibliotecas DLL no existentes desde C:\ProgramData\Clario\ y...

dirtycow-lab

Dirty COW Educational PoC CVE-2016-5195 ⚠️ Legal Warning This code is for EDUCATIONAL PURPOSES ONLY. Any malicious use is strictly prohibited and illegal. 📖 What is Dirty COW? Dirty COW CVE-2016-5195 is a privilege escalation vulnerability in the Linux Kernel that exploits a race condition in the...

Potato

Potato Privilege Escalation on Windows 7,8,10, Server 2008, Server 2012 How it works Potato takes advantage of known issues in Windows to gain local privilege escalation, namely NTLM relay specifically HTTP-SMB relay and NBNS spoofing. Using the techniques outlined below, it is possible for an...

CVE-2024-48990

CVE-2024-48990 Exploit Local Privilege Escalation in needrestart 3.8 via PYTHONPATH injection. How It Works 1. needrestart runs as root and scans all processes 2. Finds our Python process, reads PYTHONPATH=/tmp/.m from /proc/pid/environ 3. Executes Python as root with our malicious PYTHONPATH 4...

CVE-2021-34527

CVE-2021-34527 CVE-2021-34527 es una vulnerabilidad crítica de ejecución remota de código y escalada de privilegios local denominada "PrintNightmare". Se han publicado exploits de prueba de concepto Python, C++ para la capacidad de ejecución remota de código, y una versión en C para escalada de...

CVE-2024-50475

CVE-2024-50475 Signup Page = 1.0 - Actualización no autenticada de opciones arbitrarias Descripción: El plugin Signup Page para WordPress es vulnerable a modificaciones no autorizadas de datos que pueden llevar a una escalada de privilegios debido a una falta de verificación de capacidades en tod...

CVE-2020-24029

CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...

BadPfs-CVE-2022-4510

BadPfs Python script that generates pfs payloads to exploit CVE-2022-4510 Simply create a pfs payload using the script. When binwalk is run with -e on the payload, a file can be overwritten with the permission of binwalk. This example will overwrite /etc/sudoers with the contents of ./data when i...

CVE-2017-9606

CVE-2017-9606 Due to insufficient of checking integrity, authenticity and low user rights on update folder local user can craft fake ViPNet update files with arbitrary execution code and place them in ViPNet update folder. After placing fake update files in ViPNet update folder, ViPNet update...

CVE-2024-56071

🚨 Simple Dashboard = 2.0 - Unauthenticated Privilege Escalation 📄 Description The Simple Dashboard plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0. This makes it possible for unauthenticated attackers to elevate their privileges to that of an...

CVE-2024-54378

CVE-2024-54378 Quietly Insights = 1.2.2 - Autorización faltante para actualización arbitraria de opciones por parte de usuarios autenticados Suscriptor+ Descripción El plugin Quietly Insights para WordPress es vulnerable a la modificación no autorizada de datos que puede llevar a una escalada de...

PyPsPipeJack

PyPsPipeJack This tool is the continuation of my other tool, OpenPsPipeJack. This one is python based and works on Linux largely using Impacket. In summary, if you have local admin on a remote host, you can connect to remote PowerShell sessions on that host and execute commands within those...

CVE-2024-48245

CVE-2024-48245 SQL Injection Vulnerability in Vehicle Management System 1.0 - 1.3 Description Vehicle Management System 1.0 is vulnerable to SQL Injection. Low-authenticated guest users or administrative accounts can exploit vulnerable POST parameters in several endpoints to execute arbitrary SQL...

wordpress-CVE-2024-10924--exploit

🚀 WordPress Really Simple Security Plugin Vulnerability CVE-2024-10924 📌 Overview WordPress is one of the most popular open-source Content Management Systems CMS, powering millions of websites worldwide—from personal blogs to full-fledged e-commerce platforms. However, in November 2024 , a critic...

CVE-2022-24924

Improper access control vulnerability in LiveWallpaperService CVE-2022-24924SVE-2021-24089 Windows version tested: Windows 10 20H2 Build 19042.1348 64bit Live Wallpaper Version: 3.0.9.0 or earlier There is a LiveWallpaperService that works by default in Samsung laptops, but there was a...