248657 matches found
CVE-2025-32463
CVE-2025-32463 Local Privilege Escalation in Sudo via Malicious nsswitch.conf with sudo -R. Affected versions 1.9.14 β 1.9.17 π Introduction Sudo is a widely used command-line utility on Unix-like systems that allows permitted users to execute commands with elevated privileges. It plays a critica...
sudo_exploit
sudoexploit own implementation of the CVE-2017-1000367 sudo privilege escalation vulnerability in python...
FortiLPE
Description Local privilege escalation PoC exploit for CVE-2025-62676 / EUVD-2025-206993 that targets FortiClient VPN running on Windows. Executes a payload in the context of SYSTEM from a normal user context via an arbitrary XML file write. The PoC has been tested against FortiClient version 7.4...
CVE-2020-29669
=============== Macally WIFISD2-2A82 Writeup for CVE-2020-29669 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== This is a writeup of exploiting the Macally WIFISD2-2A82 Travel Router Firmware version: 2.000.010. The Guest user is able to reset its own password...
CVE-2024-34831
CVE-2024-34831 XSS Vulnerability in GibbonEdu Core v26.0.00 leading to Privilege Escalation Gibbon is an awesome open source fully fledged school management system. A lot of effort is going on in revamping the rather old code base. Author: Christian Bajada 1. Vulnerability The imageLink parameter...
vulnerability-exploitation
vulnerability-exploitation Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability β CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because ...
CVE-2017-7184
CVE-2017-7184 β Linux Kernel XFRM Privilege Escalation No Sudo Overview This repository contains a proof-of-concept local privilege escalation exploit for CVE-2017-7184 , a Linux kernel vulnerability in the XFRM IPsec netlink subsystem. The exploit demonstrates how an unprivileged user can gain...
CVE-2025-2304-PoC
Exploit CVE-2025-2304 Camaleon CMS vulnerable a escalada de privilegios mediante una asignaciΓ³n masiva DescripciΓ³n de la vulnerabilidad Existe una escalada de privilegios mediante una asignaciΓ³n masiva en Camaleon CMS Cuando un usuario desea cambiar su contraseΓ±a, se llama al mΓ©todo 'updatedajax'...
cve-2021-4034
cve-2021-4034 PoC for cve-2021-4034 Based on the PoC by https://haxx.in: https://haxx.in/files/blasty-vs-pkexec.c. Probably he's https://github.com/blasty?! I don't know. With a little help from https://github.com/daimoniac How to use? Compile cve-2021-4034.c gcc -Wall cve-2021-4034.c -o...
CVE-2022-0847
DIRTY PIPE CVE-2022-0847 This is a kernel vulnerability that allows overwriting of data in arbitrary read-only files, which can therefore lead to privilege escalation since an unprivileged process can write into a privileged process. All credits go to π₯Max Kellermann for finding the vulnerability...
CVE-2023-37250-POC
CVE-2023-37250 PoC ArtΓculo: https://hackingiscool.pl/roaming-and-racing-to-get-system-cve-2023-37250/...
CVE-2023-38041-POC
CVE-2023-38041-POC Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept...
CVE-2021-1675-PrintNightmare
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...
CVE-2024-22274
CVE-2024-22274 Run and input host ip, port, username and password. Exploit will create user NinhPwn with password "NinhPwn123" then spawn ssh with root shell. Fix python3 install packages: pip install pwinput, pip install paramiko, pip install time,pip install base64...
Zabbix-CVE-2022-23131
Zabbix-CVE-2022-23131 Zabbix-SAML-Bypass: CVE-2022-23131 Description: Zabbix is vulnerable to Frontend Authentication Bypass Vulnerability with enabled SAML SSO authentication, due to insecure client-side session storage. On successful exploit of this issue, it allows a malicious actor to escalat...
CVE-2024-10793
CVE-2024-10793 PoC Set this lines to your hosts file: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com Launch Wordpress using docker: $ sudo systemctl start docker $ sudo docker-compose up -d Open http://goodcms.lab:2121 and do installation wordpress steps. Install wp-security-audit-log.5.2.1 or olde...
CVE-2019-15511
GOG Galaxy Exploit for CVE-2019-15511 usage: exploit.py -h --action LaunchElevatedRequest,FixDirectoryPrivilegesRequest,CreateDirectoryRequest,QueryProcessInfoRequest,InstallServiceRequest,DeleteServiceRequest,MoveAndVerifyGlobalDependencyRequest target positional arguments: target optional...
CVE-2021-4034
CVE-2021-4034 Local privilege escalation via pkexec Watch the β¨ YouTube Video...
CVE-2025-2563
CVE-2025-2563 The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges π΄ Vulnerability Overview...
CVE-2025-32463
π¨ CVE-2025-32463 β βChwootβ Critical Local Privilege Escalation in the Most Widely Used Linux Privilege Manager Any local user even without sudoers permissions could become root in seconds usingsudo -R β οΈ Overview CVE-2025-32463 also known as "chroot-to-root " is a critical local privilege...