defender-privilege-escalation-scanner

Defender Vulnerability Scanner Microsoft Defender vulnerability scanner — CVE-2026-41091 / CVE-2026-45498 Detects security weaknesses in Microsoft Defender deployments. For authorized security testing only. Features CVE-2026-41091 detection CVE-2026-45498 detection Microsoft Defender posture...

CVE-2025-13486

CVE-2025-13486 exploit ACF Extended WordPress Plugin — Remote Code Execution & Privilege Escalation Exploit for the CVE-2025-13486 discovered by Marcin Dudek dudekmar ⚠️ Disclaimer This repository is provided for research and defensive security purposes only. The author assumes no responsibility...

CVE-2025-6018-and-CVE-2025-6019

Check Its Vulnerable or not root@kitploit: rpm -q pam || dpkg -l | grep libpam or find /etc/pam.d/ -name '' -exec grep -l 'pamenv' \; 2/dev/null or find /etc/pam.d/ -name '' -exec grep -l 'pamsystemd' \; 2/dev/null or systemctl --version | head -1 If version Include :Vulnerable PAM version...

CVE-2022-0185-Analysis-and-Exploit

CVE-2022-0185-Análisis-y-Exploit Investigación y prueba de concepto para la vulnerabilidad de desbordamiento de montón del kernel Linux CVE-2022-0185. CVE-2022-0185 – Análisis de Desbordamiento de Montón del Kernel Linux Resumen CVE-2022-0185 es una vulnerabilidad de desbordamiento de búfer basad...

CVE-2025-13486

🔴 CVE-2025-13486 - Exploit del Plugin de WordPress Advanced Custom Fields Extended ACFE 📋 Resumen Exploit de prueba de concepto para CVE-2025-13486 , una vulnerabilidad crítica en el plugin de WordPress Advanced Custom Fields: Extended ACFE que permite la Ejecución Remota de Código que conduce a ...

metasploitable3-pentest-writeup

Metasploitable3 — Penetration Test Report Author: Arlen Fortunato Date: September 2026 Environment: Parrot OS attacker → Metasploitable3 Ubuntu 14.04 target Scope: Full network penetration test — enumeration, exploitation, privesc, post-exploitation Type: Home Lab / Capture The Flag Practice ⚠️ Al...

Dirty-Pipe-Exploits

CVE-2022-0847 Exploits Dirty Pipe What is it ? Disclosed on March 7, 2022 by Max Kellerman2, CVE-2022-0847 is a vulnerability in the Linux kernel versions 5.8 to 5.16.11 that allows attackers to overwrite read-only or immutable files and escalate their privileges on the victim's system...

CVE-2016-7255

CVE-2016-7255 Proof Of Concept privilege escalation exploit using CVE-2016-7255, aims to mirror the functionality of the exploit found in the wild as described by Trend Micro. You may want to fix the recovery before using this anywhere important. Some code taken from tinysec's original crash PoC...

CVE-2025-32463

Vulnerable: sudo 1.9.14 to 1.9.17 Patched: sudo 1.9.17p1 and later Exploit root@kitploit: git clone https://github.com/kh4sh3i/CVE-2025-32463.git cd CVE-2025-32463 chmod +x exploit.sh id ./exploit.sh id...

cve-2024-1086-lpe

cve-2024-1086-lpe Technical analysis and proof-of-concept for CVE-2024-1086, a Linux kernel nftables use-after-free vulnerability leading to local privilege escalation. Includes vulnerability breakdown, affected versions, exploitation methodology, and mitigation guidance for research and...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automation of the exploitation of CVE-2022-26923 Certifried allowing privilege escalation via abuse of Active Directory Certificate Services AD CS and Resource-Based Constrained Delegation RBCD, leading to the dump of the NTLM hash of a domain...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

CVE-2026-3584

CVE-2026-3584 – WordPress Kali Forms = 2.4.9 - Unauthenticated Remote Code Execution via formprocess 🔥 Vulnerability Summary The WordPress Kali Forms plugin versions = 2.4.9 contain a critical unauthenticated remote code execution RCE vulnerability. This flaw allows unauthenticated attackers to...

CVE-2022-24637

Vulnerable Application Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with ' and get IPAddress, e.g 172.22.0.2 Database...

CVE-2025-29824

CVE-2025-29824 win1021h2190445608x64 win1123h2226315126x64 testclient programa de prueba monitorclfssys controlador que monitorea todas las solicitudes IRP de CLFS poc Crash PoC de pantalla azul LPE win10poc win11poc Información básica de compilación Versión de Windows SDK: 10.0 última versión...

SeriousSam

SeriousSam HiveNightmare a.k.a. SeriousSam Local Privilege Escalation in Windows – CVE-2021-36934...

CVE-2024-50657

CVE-2024-50657:Incorrect Access Control on Owncloud apk An issue in Owncloud android apk v.4.4.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, specifically in the checkPassCodeIsValid method. Vulnerability Type Incorrect Access Control Vendor of...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. Affected versions The exploit affects versions from includin...

CVE-2025-32463-EXPLOIT

Xpl0it — Secuestro de la biblioteca NSS de Sudo | v0.0.4 Autor: 0xb0rn3 | 0xbv1 Tipo: Prueba de concepto PoC Herramienta de investigación de seguridad CVE: CVE-2023-42456 Técnica: Inyección de biblioteca NSS en chroot de sudo -R → escalada de privilegios a root ⚠️ Aviso de responsabilidad Esta...

CVE-2026-84645

CVE-2026-84645 — Jenkins PersistenceRoot Deserialization RCE SECURITY-3972 PoC for the Jenkins deserialization vulnerability fixed on 2026-09-02 advisory. A low-privileged account holding Item/Configure on any single job can turn that into arbitrary code execution as the Jenkins OS user...