CVE-2026-3584

CVE-2026-3584 – WordPress Kali Forms = 2.4.9 - Unauthenticated Remote Code Execution via formprocess 🔥 Vulnerability Summary The WordPress Kali Forms plugin versions = 2.4.9 contain a critical unauthenticated remote code execution RCE vulnerability. This flaw allows unauthenticated attackers to...

CVE-2022-24637

Vulnerable Application Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with ' and get IPAddress, e.g 172.22.0.2 Database...

CVE-2025-29824

CVE-2025-29824 win1021h2190445608x64 win1123h2226315126x64 testclient programa de prueba monitorclfssys controlador que monitorea todas las solicitudes IRP de CLFS poc Crash PoC de pantalla azul LPE win10poc win11poc Información básica de compilación Versión de Windows SDK: 10.0 última versión...

SeriousSam

SeriousSam HiveNightmare a.k.a. SeriousSam Local Privilege Escalation in Windows – CVE-2021-36934...

CVE-2024-50657

CVE-2024-50657: Control de Acceso Incorrecto en la apk de Owncloud Un problema en la apk de Owncloud para Android v.4.4.1 permite a un atacante físicamente cercano escalar privilegios a través de la clase PassCodeViewModel, específicamente en el método checkPassCodeIsValid. Tipo de Vulnerabilidad...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. Affected versions The exploit affects versions from includin...

CVE-2025-32463-EXPLOIT

Xpl0it — Secuestro de la biblioteca NSS de Sudo | v0.0.4 Autor: 0xb0rn3 | 0xbv1 Tipo: Prueba de concepto PoC Herramienta de investigación de seguridad CVE: CVE-2023-42456 Técnica: Inyección de biblioteca NSS en chroot de sudo -R → escalada de privilegios a root ⚠️ Aviso de responsabilidad Esta...

CVE-2026-84645

CVE-2026-84645 — Jenkins PersistenceRoot Deserialization RCE SECURITY-3972 PoC for the Jenkins deserialization vulnerability fixed on 2026-09-02 advisory. A low-privileged account holding Item/Configure on any single job can turn that into arbitrary code execution as the Jenkins OS user. | ---|--...

k8s-cve-2020-8554-mitigations

Mitigaciones de Prisma Cloud Compute para Kubernetes CVE-2020-8554 Este repositorio contiene reglas de Admisión de Prisma Cloud Compute que mitigan la explotación de CVE-2020-8554, una vulnerabilidad de Kubernetes sin parche. Para garantizar un uso correcto, siga las instrucciones proporcionadas ...

CVE-2023-26269

CVE-2023-26269: Misconfigured JMX in Apache James By default Apache James opens a JMXRMI service that listens on localhost, port 9999. Because the JMX is misconfigured to allow unauthenticated access, an attacker that has local access to the machine running James can use a “MLet attack” in order ...

Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation

Ivanti/Pulse VPN Client Exploit of CVE-2023-35080 leading to a privilege escalation Code related to the exploitation of the CVE-2023-35080 which leverages a write primitive in the Ivanti/Pulse VPN client kernel driver in Windows. The write primitive conducts to a privilege escalation. The exploit...

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation

CVE-2025-6018-y-CVE-2025-6019-Escalada-de-Privilegios Esta es solo una nota rápida sobre cómo explotar estas vulnerabilidades para obtener acceso root. Comience utilizando esta herramienta en la máquina atacante: https://raw.githubusercontent.com/ibrahmsql/CVE-2025-6018/refs/heads/main/CVE-202...

CVE-2023-4911-Lab

Entorno de análisis de CVE-2023-4911 "Looney Tunables" Entorno de prácticas basado en Docker para el análisis de la vulnerabilidad de desbordamiento de búfer Local Privilege Escalation en el cargador dinámico de GNU C Library glibc y el desarrollo de exploits. Información de CVE Elemento| Conteni...

CVE-2021-1675-CVE-2021-34527

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

CVE-2021-29447

WordPress 5.6-5.7 - Authenticated Author+ XXE CVE-2021-29447 Using Step1. Run WordPress root@kitploit: $ make up-wp Step2. Run Attacker web server root@kitploit: $ make up-mal Step3. Generate malicious WAV file Without wavefile npm Recommend root@kitploit: $ echo -en...

CVE-2025-25617

CVE-2025-25617 Unifiedtransform v2.0 es vulnerable a un control de acceso incorrecto, permitiendo a los profesores crear entradas de programa de estudios — un rol destinado únicamente a los administradores. Vendedor: Unifiedtransform PoC Paso 1: Inicia sesión en la aplicación como Profesor. Paso ...

CVE-2022-41082-POC

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OWASSRF Vulnerability Effecting Microsoft Exchange Servers This is Post-Auth RCE for ProxyNotShell OWASSRF, valid cardentials are needed for command execution. Added the Powershell PoC script for TabShell Vulnerability CVE-2022-41076 The...

CVE-2024-54239

CVE-2024-54239 Eyewear prescription form = 4.0.18 - Missing Authorization to Unauthenticated Arbitrary Options Update Description The Eyewear prescription form plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability...

Exploit-PoC-para-CVE-2024-30085

🚨 Exploit PoC for CVE-2024-30085 Proof of Concept exploit for the CVE-2024-30085 privilege escalation vulnerability. For educational and security research purposes only. ⚠️ Legal Warning FOR EDUCATIONAL USE ONLY ✅ Authorized security research ✅ Controlled laboratories ✅ Cybersecurity education ❌...

tools-for-CVE-2018-1000001

Tools for CVE-2018-1000001 Check vulnerability: root@kitploit: $ cat /proc/sys/kernel/unprivilegedusernsclone Output: root@kitploit: 1 If file "/proc/sys/kernel/unprivilegedusernsclone" does not exists: root@kitploit: $ unshare -mU /bin/sh -c "sleep 5" & /bin/sh -c "sleep 1; cd /proc/$!/cwd;...