CVE-2025-50675-GPMAW-Permissions

CVE-2025-50675 – Insecure Permissions in GPMAW 14.2 Summary CVE-2025-50675 affects GPMAW 14.2, a bioinformatics software developed by Lighthouse Data. The installer creates the folder C:\Program Files\gpmaw with full control granted to the 'Everyone' group , allowing any local user to modify file...

CVE-2017-16995

Okay, here's an example README.md that matches the repository in the image: root@kitploit: CVE-2017-16995 This repository contains 2 exploit programs in C from ExploitDB for privilege escalation on Ubuntu 16.04 by exploiting the CVE-2017-16995 vulnerability. 📂 File List - 44298.c - 45010.c Both a...

CVE-2021-21809

CVE-2021-21809 POC CVE details: A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities. In the belo...

CVE-2021-36934-export-shadow-volume-POC

CVE-2021–36934 The derived hash is used for forgery such as PTH and bills. There is no detailed analysis here. In addition, given that access rights to most system files can be obtained, there should be more than this one method of exploitation, including Microsoft officials, which have also...

CVE-2023-2833

CVE-2023-2833 Mass Exploit Generator by Alucard0x1 This repository contains an exploit for CVE-2023-2833, a privilege escalation vulnerability in the ReviewX plugin for WordPress versions up to and including 1.6.13. Description The ReviewX plugin is vulnerable to privilege escalation, allowing a...

CVE-2017-16995

Linux Kernel Version 4.14 - 4.4 Ubuntu && Debian Description This vulnerability exists in the eBPF bpf2 system call in the Linux kernel. When a user provides a malicious BPF program that causes a calculation error in the eBPF verifier module, it leads to arbitrary memory read/write issues...

DiagTrackEoP

DiagTrackEoP Just another way to abuse SeImpersonate privilege. This PoC is based on this blog by @crisprss. In this blog @crisprss showed some interesting method to abuse SeImpersonate privilege using AzureAttestService which comes with recent verions of SQL server, PoC for that can be found her...

SCMKit

SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...

DashOverride

DashOverride What This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager vROPS that impacts versions Run root@kitploit: researcher@mars:$ ./poc.py + usage: ./poc.py connec...

CVE-2023-4911

CVE-2023-4911 Usage root@kitploit: docker build -t CVE-2023-4911 -f Dockerfile . docker run -it CVE-2023-4911 ./exp References https://github.com/leesh3288/CVE-2023-4911 https://github.com/Green-Avocado/CVE-2023-4911...

ubuntu-privesc-lab

ubuntu-privesc-lab Full penetration testing workflow: credential brute force, SSH access and privilege escalation CVE-2021-4034 OVERVIEW This project demonstrates a full penetration testing workflow against a vulnerable Ubuntu virtual machine. The attack chain includes reconnaissance, credential...

Gombruc

Gombruc escalada de privilegios para linux todas las versiones Esta vulnerabilidad está relacionada con CVE-2025-0401, que afecta a todos los sistemas Linux. Con la ayuda de este script bash, puedes dar a tu usuario cualquier nivel de acceso, hasta e incluyendo acceso Root. Advertencia: Este...

CVE-2025-5701

CVE-2025-5701 HyperComments = 1.2.2 - Unauthenticated Subscriber+ Arbitrary Options Update Description The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function...

Research-CVE-2023-27524

Research-CVE-2023-27524 The ASEAN Information Security Student Competition Jeopardy has temporarily concluded; my team MSECHUNT3R won second place in the Jeopardy bracket. I feel both happy and sad because this year's web challenge didn't meet my expectations, but anyway, I have a CVE to analyze ...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS 🛡️ Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. 📜 Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers...

Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074

Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074...

Elevator

Description Elevator allows to bypass the UAC and spawn an elevated process with full administrator privileges. This is done by abusing the behaviour of the RPC server that implements the UAC feature, as demonstrated by James Forshaw in his article Calling Local Windows RPC Servers from .NET. The...

DirtyCred

DirtyCred: Escalating Privilege in Linux Kernel DirtyCred is a kernel exploitation concept that swaps unprivileged kernel credentials with privileged ones to escalate privilege. Instead of overwriting any critical data fields on kernel heap, DirtyCred abuses the heap memory reuse mechanism to get...

CVE-2021-4034

Proof of Concept PoC: CVE-2021-4034 PwnKit Note: This repository and its content are part of a Final Degree Project FDP, created solely for educational purposes and academic research. Description This repository contains a proof of concept PoC for the CVE-2021-4034 vulnerability, also known as...

CVE-2023-32233

CVE-2023-32233 5.x Kernel Adaptation Existing Exploits 1. https://github.com/Liuk3r/CVE-2023-32233/tree/main 2. https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-32233mitigation Reason Since the lower version listdelrcu. Method This exploit has been tested on...