EpSiLoNPoInT-

!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - README.md Completo y Listo para Copiar y Pegar CVE-2026-23550 | Framework de Explotación Masiva Modular DS Auth Bypass Autor: EpSiLoNPoInT | Versión: 7.1-GOD | Android 24h Coding | 08/02/2026 """...

CVE-2026-32223-USBPrint-Exploit

CVE-2026-32223: Conéctame si puedes: Explotando los controladores de impresora USB en Windows Desbordamiento de búfer basado en heap en el controlador de impresora USB de Windows usbprint.sys que conduce a una escalada de privilegios local LPE Esta vulnerabilidad fue descubierta y reportada por...

CVE-2021-4034-Linux

CVE-2021-4034 PoC para PwnKit: Vulnerabilidad de escalada de privilegios locales en pkexec de polkit CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

pwnKit

pwnKit Acerca de: Título: pwnKit Descripción: Escalada de privilegios en sistemas operativos tipo Unix AUTOR: drapl0n Versión: 1.0 Categoría: Escalada de Privilegios Objetivo: Sistemas operativos tipo Unix Modos de ataque: HID pwnKit es un payload de USB-Rubber-Ducky para escalada de privilegios,...

CVE-2025-32463

CVE-2025-32463 🚨 Escalada de privilegios a root usandosudo chroot. No se necesita gcc instalado. 🚀 ¿Qué es CVE-2025-32463? CVE-2025-32463 es una vulnerabilidad de Linux que permite a un atacante local escalar privilegios a root abusando del comando sudo chroot. A diferencia de exploits similares,...

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - Escalada de Privilegios No Autenticada Este es un script de Python que explota la vulnerabilidad CVE-2024-6624 en el plugin JSON API User = 3.9.3 para WordPress. Esta herramienta permite a atacantes no autenticados registrar nuevos usuarios y escalar sus...

CVE-2025-13390

CVE-2025-13390 WP Directory Kit El plugin WP Directory Kit para WordPress es vulnerable a un bypass de autenticación en todas las versiones hasta la 1.4.4 inclusive debido a una implementación incorrecta del algoritmo de autenticación en la funciónwdkgenerateautologinlink. Esto se debe a que la...

WP-CVE-2023-28121

WP-CVE-2023-28121 WooCommerce Payments 5.6.2 - 未认证权限提升 Python 2.7 请我喝咖啡： 比特币 $：14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC 如何使用？ 安装 Python 2.7 在此下载 python file.py 参考：https://wpscan.com/vulnerability/0f78a245-866c-462e-bd23-43dfadb57072/...

HTB-Facts-Writeup

HackTheBox — Facts Machine Writeup Machine Info Field| Details ---|--- Name| Facts OS| Linux Difficulty| Easy Release| Season 10 Retired| No Attack Chain Overview Recon → Web Enumeration → CVE-2025-2304 Mass Assignment → S3/MinIO Credential Leak → SSH Key Extraction → Passphrase Cracking → User...

OverlayFS-LPE-Exploit

OverlayFS-LPE-Exploit OverlayFS Local Privilege Escalation CVE-2021-3493 Project Overview This repository contains documentation and exploit code for a Local Privilege Escalation LPE vulnerability found in the Ubuntu Linux kernel. This was tested in a TryHackMe lab environment. Lab Highlights...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

privilege-escalation-breach

Security breach project - Privilege escalation The vulnerability is in Oracle Solaris, a product of Oracle Systems component: XScreenSaver. The supported version that is affected is 11. It's an easily exploitable vulnerability which allows low privileged attackers with logon to the infrastructure...

Privilege-Escalation-CVE-2019-13272-

Privilege-Escalation-CVE-2019-13272- This repository contains a report of Privilege Escalation vulnerability CVE-2019-13272...

RLSA-2026:73971 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component CVE-2026-75874 firefox: Sandbox escape due to...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

rsync security, bug fix, and enhancement update

An update is available for rsync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsync utility enables the users to copy and synchronize files locally or...

CVE-2026-47574

A flaw was found in the NVIDIA Virtual GPU vGPU Manager for Linux. A local user with basic privileges can exploit an incorrect transfer of resources across isolation spheres. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service...

CVE-2026-47552

A flaw was found in nvidia-driver. An unprivileged local user can bypass an authorization check in the kernel mode layer to modify privileged configurations. Successful exploitation could allow an attacker to escalate privileges, execute arbitrary code, access sensitive information, or cause a...

CVE-2026-47599

A flaw was found in the NVIDIA GPU Display Driver open-source kernel module. An unprivileged local attacker can exploit improper preservation of memory access permissions during Direct Memory Access DMA mapping, which controls how the graphics hardware accesses system memory. Successful...

CVE-2026-47519

A flaw was found in nvidia-vgpu-software's Virtual GPU vGPU Manager for Linux. A local user with basic privileges can trigger an out-of-bounds read in the kernel-mode driver, accessing memory outside designated boundaries. A successful exploit could allow the attacker to execute arbitrary code,...