CVE-2026-27542-CVE-2026-27540-

🔴 Vulnerability Overview CVE-2026-27542 — Unauthenticated Privilege Escalation Description: The WooCommerce Wholesale Lead Capture plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation in all known affected versions. The vulnerability exists within the wwlccreateuser AJAX...

CVE-2021-4034-POC

CREDITS VULNERABILITY AUTHOR: https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 Reference https://github.com/arthepsy/CVE-2021-4034/blob/main/cve-2021-4034-poc.c...

PyInstallerPrivEsc

PyInstallerPrivEsc Exploit for PyInstaller CVE-2019-16784 Article coming soon...

CVE-2021-3438

CVE-2021-3438 A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege...

WindowsElevation

What's this This project is mainly used to collect the commonly used exp of Windows platform and give the relevant repair scheme. On the one hand, it is helpful for security researchers to quickly complete the right raising in the process of penetration testing, on the other hand, it is also...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC para CVE-2009-0229 "Vulnerabilidad de lectura de archivos del Print Spooler" LPE AFR relacionado con CVE-2020-1048 Detalles Autor: Andrei Costin [email protected] https://twitter.com/costinandrei/ Fecha del PoC: 2010-xx-xx Fecha de publicación: 2020-05-14...

CVE-2023-3460

🚨 CVE-2023-3460 - WordPress Ultimate Member Privilege Escalation Exploit This is a proof-of-concept PoC exploit for CVE-2023-3460, a critical vulnerability in the WordPress plugin Ultimate Member. It allows unauthenticated users to escalate their privileges to Administrator by crafting a maliciou...

CVE-2024-27462

CVE-2024-27462 Wondershare MobileTrans 4.5.6 - Unquoted Service Path Description: Wondershare Filmora versions 4.5.6 and lower contain multiple unquoted service path which allow attackers to escalate privileges to the system level. Impacted services WsAppService3 service binary Path C:\Program...

Offensive

Offensive technologies course This repository contains descriptions of several vulnerabilities and the code that exploits them. Exploitable environments can be found in /dockerfiles/victim folder. Attacker environments can be found in /dockerfiles/attacker folder. Everything comes as Docker image...

CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation ⚠️ AI Engine = 3.1.3 — Unauthenticated Sensitive Information Exposure → Privilege Escalation GitHub: Nxploited Telegram: @KNxploited IMPORTANT NOTICE: Many unethical individuals attempt to...

nftables-oob-read-write-exploit-CVE-2023-35001-

nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage root@kitploit: Build $ make Run $ ./exploit This produces a...

CVE-2025-27520-PoC

CVE-2025-27520 — Safe Educational Simulation / PoC Demo Stand ⚠️ Important: This is a safe educational simulation of the CVE-2025-27520 vulnerability. The project includes a simulation service Flask and a safe PoC scanner Python. On receiving a test marker, the simulation creates an evidence file...

CVE-2026-100871

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT tokens issued by separate Admin and Shop API endpoints. Attackers can register a shop customer account using an administrator's email address and obtain a token that the Admin API...

cve-2025-32463-lab

CVE-2025-32463 – Sudo chroot Local Privilege Escalation Lab This repository contains a Docker-based lab and proof-of-concept exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 to 1.9.17. 🚨 Disclaimer This code is for educational and authorized testing...

CVE-2023-36003

CVE-2023-36003: Windows Defender Exploit Protection Bypass PoC This repository contains a Proof of Concept PoC for CVE-2023-36003 , a critical security feature bypass vulnerability affecting Windows Defender Exploit Protection. Overview CVE-2023-36003 is a vulnerability in Windows Defender that...

CVE-2025-27591

CVE-2025-27591 – Privilege Escalation via Symlink Abuse in below 🛑 Disclaimer : This exploit is provided for educational and authorized security testing only. Unauthorized use may be illegal. 🧠 Overview below is a performance monitoring tool developed by Facebook for Linux systems. Versions of...

EUVD-2026-87943

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT tokens issued by separate Admin and Shop API endpoints. Attackers can register a shop customer account using an administrator's email address and obtain a token that the Admin API...

FreePBX-SQLi-Exploit-Privilege-escalation

FreePBX: From Unauthenticated SQL Injection to Root Shell CVE-2025-57819 • FreePBX 16.0.40.7 • HTB Connected 📋 Executive Summary This walkthrough documents the complete compromise of the HTB machine Connected. The attack chain begins with an unauthenticated SQL injection vulnerability in FreePBX,...

CVE-2021-3560-EXPLOIT

Description As part of my cybersecurity thesis I wanted to create an exploit for a vulnerability. I HIGHLY recommend reading this guide, as this exploit is based on it: https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ Also, check out this repo, as i took...

CVE-2024-23700

CVE-2024-23700 - Android Companion Device Privilege Escalation PoC This project demonstrates CVE-2024-23700, a privilege escalation vulnerability related to the Companion Device mechanism on Android. The PoC shows how an app can exploit the companion device association flow to obtain certain...