208004 matches found
PoC
Leveraging CVE-2018-19788 to dump protected files without root shell CVE-2018-19788 is an issue where any user with a UID over INTMAX IE 4000000000 can run any systemctl command on a systemd linux box, such as Ubuntu. There is already a writeup to gain a root shell found: here. The main differenc...
slui-file-handler-hijack-privilege-escalation
Slui ๆไปถๅค็็จๅบๅซๆ LPE ๆผๆดไฟกๆฏ| ---|--- ๆฅๆ| 15.01.2018 ๅทฒไฟฎ่กฅ| Windows 10 20H1 19041 exploit-db| 44830 ๆต่ฏ็ฏๅข| Windows 8-10, x86/x64 ้็จ ๆ่ฟฐ slui.exe ๆฏไธไธช่ชๅจๆๅๆ้็ไบ่ฟๅถๆไปถ๏ผๅฎนๆ้ญๅๆไปถๅค็็จๅบๅซๆๆปๅปใ ๆง่กๆถไผ่ฏปๅ HKCU\Software\Classes\exefile\shell\openใ็ฑไบ่ฏฅๆณจๅ่กจ้กนๅฏไป็จๆทๆจกๅผ่ฎฟ้ฎ๏ผๅ ๆญคๅฏไปฅๆณจๅ ฅไปปๆๅฏๆง่กๆไปถใ ่ฏฅๆผๆดๅฉ็จ้ๅธธไธ็ผ็จ่ฏญ่จๅไฝๆฐๆ ๅ ณ๏ผๅ ไธบๆ ้ DLL...
CVE-2023-45992
CVE-2023-45992 A vulnerability in Ruckus CloudPath 5.12 build 5538 or before could allows a remote unauthenticated attacker to obtain full administrator privileges by leveraging Stored Cross-Site Scripting and Cross-Site Request Forgery Vulnerability using a crafted script. On 16 Oct 2023, the...
CVE-2014-9322
CVE-2014-9322 PoC for Linux kernel CVE-2014-9322 a.k.a BadIRET proof of concept for Linux kernel. This PoC uses only syscalls not any libraries, like pthread. Threads are implemented using raw Linux syscalls. Raw Linux Threads via System Calls Usage root@kitploit: $ make badiret.elf is an ELF...
CVE-2025-2502
Discovered by chance while learning about local privilege escalation. In any version of Lenovo PC Manager, the tools in Lenovo PC Manager have permission flaws. Any downloaded tool grants ordinary users F full control permissions. Since tools in all versions have permission issues, ordinary users...
dirtypipez-exploit
CVE-2022-0847 DirtyPipe ๆผๆดๅฉ็จใ Credit: Max Kellermann [email protected] ไธไธชๅไธบ 'Dirty Pipe' ็ๆฐ Linux ๆผๆดๅ ่ฎธๆฌๅฐ็จๆท้่ฟๅ ฌๅผๅฏ็จ็ๆผๆดๅฉ็จ็จๅบ่ทๅ root ๆ้ใ ไปๅคฉ๏ผๅฎๅ จ็ ็ฉถๅ Max Kellermann ่ด่ดฃไปปๅฐๆซ้ฒไบ 'Dirty Pipe' ๆผๆด๏ผๅนถๆๅบๅฎๅฝฑๅ Linux ๅ ๆ ธ 5.8 ๅๆด้ซ็ๆฌ๏ผ็่ณๅ ๆฌ Android ่ฎพๅคใ ่ฏฅๆผๆด่ขซ่ฟฝ่ธชไธบ CVE-2022-0847๏ผๅ ่ฎธ้็นๆ็จๆทๅจๅช่ฏปๆไปถไธญๆณจๅ ฅๅ่ฆ็ๆฐๆฎ๏ผๅ ๆฌไปฅ root ่บซไปฝ่ฟ่ก็ SUID ่ฟ็จใ...
CVE-2022-0492-Checker
CVE-2022-0492-Checker A script to check if a container environment is vulnerable to container escapes via CVE-2022-0492 About the vulnerability On Feb. 4 , Linux announced CVE-2022-0492 , a new privilege escalation vulnerability in the kernel. CVE-2022-0492 marks a logical bug in control groups...
CVE-2022-3910
CVE-2022-3910 poc dirtyfile dirtymm...
CVE-2023-36165
CVE-2023-36165 An issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code and gain privileges via the SchedulerService.exe component. Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Ida...
CVE-2024-22026
CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...
CVE-2023-49982
CVE-2023-49982 School Fees Management System v1.0 - Incorrect Access Control - Privilege Escalation Description : Broken access control in School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts...
CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-
Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...
cve-2018-17182
define GNUSOURCE include include include include include include include include include include include int vmaspamcontrolfd = -1; int threaddonefd = -1; int vmaspamdonefd = -1; void semincint fd uint64t val = 1; if writefd, &val, 8 != 8 err1, "seminc"; void semdecint fd uint64t val; if readfd,...
bazad5
bazad5 ้ๅฏน OS X 10.10.5 ็ๆฌๅฐๆ้ๆๅ๏ผๅฉ็จ CVE-2016-1828 ๆผๆดใ...
VulnHub-DC1-Writeup
VulnHub-DC1-Writeup "Penetration testing lab writeups documenting full attack chains โ from recon to root." ๐ VulnHub โ DC-1 Boot-to-Root Writeup Difficulty: BeginnerโIntermediate Platform: VulnHub Goal: Capture all 4 flags and achieve full root-level compromise Attacker OS: Kali Linux VirtualBox...
GhostLock
GhostLock - CVE-2026-43499 Local Privilege Escalation Exploit Vulnerability Overview CVE ID: CVE-2026-43499 Vulnerability Type: futex PI priority inheritance stack UAF Use-After-Free Affected Range: Linux kernel 6.1 6.12 Android GKI Exploitation Impact: Local privilege escalation + SELinux disabl...
CVE-2024-48990-Exploit
CVE-2024-48990 Exploit My full writeup for how I came to re-discovering this N-day and creating my own exploit for it can be found on my blog. Essentially, you can git clone this repository into an attacker-controlled directory, export PYTHONPATH=, and then run main.py with that PYTHONPATH value...
OVSwrap
OVSwrap CVE-2026-64531 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your use ...
printix-CVE-2022-25090
CVE-2022-25090 Instead of printing your homework as a user, print your system security policies as SYSTEM for fun. Explore the docs ยป View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap Contributing Licen...
CVE-2026-9645-ScadaBR-Analysis
CVE-2026-9645 โ ScadaBR Vulnerability Analysis Technical vulnerability analysis and CVE briefing for CVE-2026-9645 , affecting the open-source ScadaBR SCADA/HMI platform. Overview CVE-2026-9645 is a critical authenticated remote code execution vulnerability in ScadaBR. According to the prepared...