CVE-2025-25968

CVE-2025-25968: Improper Access Control vulnerability in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

PrintSpoofer-ReflectiveDLL

PrintSpoofer Details PrintSpoofer is a tool that performs local privilege escalation by exploiting a vulnerability in the Windows Print Spooler service CVE-2019-1040 / CVE-2019-1019. This project implements the PrintSpoofer exploit in Reflective DLL format, making it suitable for use with...

CVE-2025-1910-WatchGuard-Privilege-Escalation

WatchGuard Mobile VPN with SSL Client Privilege Escalation CVE-2025-1910 A privilege escalation vulnerability in WatchGuard's Mobile VPN with SSL MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. Serve the malicious client.wgssl file via flask:...

GroupPolicyBackdoor

GroupPolicyBackdoor GroupPolicyBackdoor is a python utility for Group Policy Objects GPOs manipulation and exploitation. GPO attack vectors can very often lead to impactful privilege escalation scenarios in Active Directory environments. And yet, offensive security professionals may be reluctant ...

CVE-2021-36934-HiveNightmare-Lab

CVE-2021-36934 HiveNightmare - Educational Lab 🎯 Objective Reproduce and analyze the HiveNightmare vulnerability in a controlled lab environment. 📋 Table of Contents Vulnerability Description Implementation Demonstration Lab Setup & Tools Exploitation Steps Mitigation Measures Demonstration...

shimit

shimit shimit es una herramienta Python que implementa el ataque Golden SAML. Más información sobre esto se puede encontrar en el siguiente artículo en nuestro blog. root@kitploit: python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity...

CVE-2022-45770

CVE-2022-45770 Description Improper input validation in driver adgnetworkwfpdrv.sys in Adguard For Windows x86 up to version 7.11 allows attacker to gain local privileges escalation. CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H References https://cve.report/CVE-2022-45770...

sudo-CVE-2017-1000367

sudo-CVE-2017-1000367 http://www.openwall.com/lists/oss-security/2017/05/30/16 Compile: gcc -o sudopwn sudopwn.c -lutil Disclaimer: I had no clue what I was doing ;- Requirements System must be selinux-enabled sudo needs to be built with selinux support sudo -r User needs to have sudo permissions...

CVE-2026-84042

crun is a lightweight OCI container runtime. This flaw affects builds that include libkrun with passt networking enabled (krun.use_passt). When a container is started rootful , crun can execute an attacker-controlled payload embedded in the container image with host root privileges , effectively ...

EUVD-2026-75321

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking krun.usepasst, crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun = 1.29...

CVE-2026-84042 Crun: crun: rootful krun with passt executes container payload as host root

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking krun.usepasst, crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun = 1.29...

CVE-2023-22515

CVE-2023-22515 Confluence Data Center & Server privilege escalation vulnerability Exploit Usage root@kitploit: python3 CVE-2023-22515.py url username password Disclaimer This detection tool is only for security testing by security testers of major security companies. Do not perform intrusion...

CVE-2026-88274

GeoVision GV-LPC2211 (V1.13), a wireless camera, is affected by a command injection vulnerability in its wireless SSID configuration. An administrator who sets a wireless SSID containing shell syntax can execute arbitrary commands as root on the device. The vulnerability requires high privileges ...

juicy-potato

Juicy Potato abusando de los privilegios dorados Una versión azucarada deRottenPotatoNG, con un poco de jugo, es decir, otra herramienta de Elevación de Privilegios Local, desde una Cuenta de Servicio de Windows a NT AUTHORITY\SYSTEM Resumen RottenPotatoNG y sus variantes aprovechan la cadena de...

EUVD-2026-75305

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...

CVE-2026-88271 GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...

EUVD-2026-75304

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...

CVE-2026-88271

GeoVision GV-LPC2211 V1.13 (and GV-LPC2011) is vulnerable to a Guest-level configuration overwrite via the SSVR service. A user with Guest privileges can overwrite the device configuration and replace the administrator password , effectively gaining full administrative control. The CNA-assigned C...

CVE-2020-25270

CVE-2020-25270 PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, City Vendor - PHPGurukul Product -https://phpgurukul.com/hostel-management-system V2.1 Vulnerability Type - Cross Site Scripting XSS Addition Information - XSS wil...