cve-2026-62737-lab

CVE-2026-62737: dal crash a SYSTEM assistito dal laboratorio Un seguito al writeup originale di CVE-2026-62737 ExecutionContext.sys chiamata indiretta arbitraria del kernel. Trasforma la PoC del crash in una catena di token-swap funzionante che avvia cmd.exe come SYSTEM, ma solo in un laboratorio...

ghostlock-apk

GhostLock APK APK standalone: elevazione dei privilegi del kernel CVE-2026-43499 GhostLock + esecuzione con identità shell Shizuku. Prerequisiti Honor AAK-AN00 / MagicOS 10 / Linux 6.6.89 / pagine da 4KB Shizuku installato e avviato tramite adb adb shell sh...

CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Beliebiger physischer Speicher-Lese-/Schreibzugriff Vollständiger Proof-of-Concept für den TechPowerUp-ThrottleStop.sys-Treiber CVE-2025-7771. Ein signierter, weiterhin ladbarer Kernel-Treiber legt über zwei IOCTLs unvalidierte physische Speicher-Lese- und...

HTB-TwoMillion-machine

Writeup do Hack The Box - TwoMillion Visão Geral Este repositório contém meu passo a passo para a máquina Hack The Box - TwoMillion. O objetivo deste writeup é documentar minha metodologia, explicar o processo de enumeração e demonstrar a cadeia de exploração que levou ao acesso de User e Root...

CVE-2023-2640-3262-PoC

CVE-2023-2640/3262-PoC Minimale PoCs für lokale Privilegienerweiterung-Schwachstellen in Ubuntu OverlayFS. CVEs CVE-2023-2640 – OverlayFS-Berechtigungsproblem CVE-2023-3262 – OverlayFS-Capability-Eskalationsproblem Dateien CVE-2023-2640.sh – einfacher OverlayFS-Verhaltenstest CVE-2023-3262.sh –...

EUVD-2026-67861

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

CVE-2023-46870

CVE-2023-46870 Nordic Semiconductor nRF Sniffer for Bluetooth LE versionen 3.0.0, 3.1.0, 4.0.0, 4.1.0 und 4.1.1 haben falsche Dateiberechtigungen gesetzt, was es Angreifern ermöglicht, eine Privilegienausweitung und Codeausführung durchzuführen, indem sie Bash- und Python-Skripte modifizieren...

OVSwrap

OVSwrap CVE-2026-64531 Analisi !WARNING La PoC è fornita esclusivamente per aiutare difensori, manutentori e team di sicurezza autorizzati a validare patch, mitigazioni, rilevamenti ed esposizione su sistemi di loro proprietà o per cui hanno esplicita autorizzazione al test. Sei l'unico...

CVE-2026-4282-Scanner

CVE-2026-4282-Scanner Uno scanner di vulnerabilità non intrusivo, basato sulla versione, per CVE-2026-4282 , che interessa Keycloak e Red Hat Build of Keycloak RHBK. ⚠️ Disclaimer: Questo strumento è destinato esclusivamente a ricerche di sicurezza autorizzate, test di penetrazione e gestione...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — ScadaBR-Schwachstellenanalyse Technische Schwachstellenanalyse und CVE-Briefing für CVE-2026-9645 , die die Open-Source-Plattform ScadaBR SCADA/HMI betrifft. Überblick CVE-2026-9645 ist eine kritische Schwachstelle zur authentifizierten Remote-Codeausführung in ScadaBR. Laut dem...

CVE-2026-55485

Piccolo Admin is a Python admin interface and content management system built on the Piccolo ORM. Prior to 1.14.0 , the superuser_validators in piccolo_admin/endpoints.py block mutating requests (PUT, PATCH, DELETE, POST) by non-superusers but permit GET requests to configured user and session ta...

EUVD-2026-67858

Piccolo Admin is an admin interface and content management system for Python, built on top of Piccolo. Prior to 1.14.0, piccoloadmin/endpoints.py uses superuservalidators to block PUT, PATCH, DELETE, and POST requests by non-superusers but permits GET requests to configured user and session table...

CVE-2026-55485 Piccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/.

Piccolo Admin is an admin interface and content management system for Python, built on top of Piccolo. Prior to 1.14.0, piccoloadmin/endpoints.py uses superuservalidators to block PUT, PATCH, DELETE, and POST requests by non-superusers but permits GET requests to configured user and session table...

CVE-2025-8045

CVE-2025-8045 — UAF della coda KCPU della GPU Arm Mali Un exploit di escalation dei privilegi locale per CVE-2025-8045 , una use-after-free nel driver del kernel della GPU Arm Mali kbase. Un processo locale non privilegiato mette in gara il percorso di dump della coda KCPU del CSF per liberare e...

CVE-2021-3156-Project

CVE-2021-3156 — Baron Samedit Estouro de buffer baseado em heap no sudo → Escalonamento local de privilégios Departamento de Cibersegurança ITSOLERA | Estágio Red Team 2026 root@kitploit: ██████╗ █████╗ ██████╗ ██████╗ ███╗ ██╗ ███████╗ █████╗ ███╗ ███╗███████╗██████╗ ██╗████████╗...

tcp-zerocopy-sm

Investigation is closed. Working fork: https://github.com/soumarcelino/Root-My-Galaxy-SM-S918B Read this - https://github.com/BuSung-dev/Root-My-Galaxy-Payloads/issues/160issuecomment-5227077583 Attempts to cause rights elevation w GhostLock via TCP Zerocopy. Designed expecially for 5.15. samsung...

CVE-2024-1086

CVE-2024-1086 Universeller lokaler Privilegieneskalations-Proof-of-Concept-Exploit für CVE-2024-1086, der auf den meisten Linux-Kerneln zwischen v5.14 und v6.6 funktioniert, einschließlich Debian, Ubuntu und KernelCTF. Die Erfolgsrate beträgt 99.4% in KernelCTF-Images...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Exploit di bypass dell'autenticazione di Microsoft SharePoint Server Critico CVSS 9.8 — Escalation di privilegi non autenticata ad Amministratore Farm in Microsoft SharePoint Server Indice Panoramica Dettagli della vulnerabilità Versioni interessate Diagrammi di architettura...

POC-Bash-CVE-2021-3560

Bash-CVE-2021-3560 POC Bash -- CVE-2021-3560 Polkit स्थानीय विशेषाधिकार वृद्धि एक्सप्लॉइट यह रिपॉजिटरी CVE-2021-3560 के लिए एक bash एक्सप्लॉइट प्रदान करती है, जो polkit में एक स्थानीय विशेषाधिकार वृद्धि भेद्यता है, जो कई आधुनिक Linux वितरणों को प्रभावित करती है। !!!!!! परीक्षण के दौरान अस्थिरता...

CVE-2023-0179-POC-

CVE-2023-0179 POC Crediti a https://github.com/TurtleARM Passaggi per la riproduzione Installa Ubuntu-22.04.5-live-server-iso e installa completamente la versione, ma non aggiornare il sistema Installa il kernel Linux versione 6.1.6 sulla macchina virtuale con la versione Ubuntu 24.04.5 Installa ...