CVE-2024-4040

CVE-2024-4040 Introduction Recently, I came across this vulnerability and found it quite interesting. I read the following articles and wrote a brief exploit. https://y4tacker.github.io/2023/12/10/year/2023/12/CrushFTP-Unauthenticated-Remote-Code-Execution-CVE-2023-43177/...

CVE-2025-8045

CVE-2025-8045 — Arm Mali GPU KCPU Queue UAF A local privilege escalation exploit for CVE-2025-8045 , a use-after-free in the Arm Mali GPU kernel driver kbase. A non-privileged local process races the CSF KCPU queue dump path to free and reclaim a cpuqueue.buffer, turns the dangling allocation int...

CVE-2018-8581

CVE-2018-8581 Se trata de una vulnerabilidad de movimiento lateral y escalada de privilegios a nivel de buzón de correo. Permite, tras contar con las credenciales de una cuenta de correo con permisos normales, realizar la delegación y toma de control de la bandeja de entrada de otros usuarios...

CVE-2016-5195

CVE-2016-5195 mi POC y EXPLOIT personal de CVE-2016-5195 dirty COW Uso POC: escribir archivos de forma arbitraria Simplemente un POC de este CVE, compile el archivo poc.c de la siguiente manera: root@kitploit: $ gcc poc.c -o poc -static -lpthread Debe ejecutarlo de la siguiente manera:...

CVE-2026-93477 Private action arguments can be set by user input on the bulk destroy and bulk update paths in Ash

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a private action argument on the bulk destroy and bulk update paths. Action arguments declared with public?: false are meant to be set only by trusted...

EUVD-2026-86550

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a private action argument on the bulk destroy and bulk update paths. Action arguments declared with public?: false are meant to be set only by trusted...

CVE-2026-93477

The ash-project ash framework is vulnerable to an Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability. In versions 2.17.15 before 3.33.11 , the Ash.Actions.Destroy.Bulk.base_changeset/5 and Ash.Actions.Update.Bulk.base_changeset/5 functions fail to verify ...

POC-of-CVE-2022-36271

POC-of-CVE-2022-36271 The name of an affected Product : Outbyte PC Repair Installation File The affected version : 1.7.112.7856 The CVE ID for the entry : CVE-2022-36271 Description: iertutil.dll is missing so an attacker can use a malicious dll with same name and can get a admin privileges and...

CVE-2025-32462-POC

CVE-2025-32462 – sudo -h Privilege Escalation PoC 🚨 Local privilege escalation exploit for sudo via the -h/--host argument Affects systems with sudo misconfigurations allowing unintended root access. 🧠 About This PoC demonstrates CVE-2025-32462 , a logic flaw in sudo all versions ≤ 1.9.17, where...

Windows_MSKSSRV_LPE_CVE-2023-36802

CVE-2023-36802 POC de escalada de privilegios local autores: chompie Solo para fines de demostración. El exploit completo funciona en sistemas Windows 11 22H2 vulnerables. Adaptar el exploit a todos los sistemas vulnerables se deja como ejercicio para el lector. Git gud, etc. Uso: root@kitploit:...

CVE-2022-0185-Case-Study

Estudio de caso CVE-2022-0185 Este estudio de caso es el resultado de una tarea de ECE 9069: Introducción al Hacking: https://whisperlab.org/introduction-to-hacking/ Resumen de CVE-2022-0185 CVE-2022-0185 es una vulnerabilidad de desbordamiento de búfer basado en montón que se encontró en la form...

CVE-2021-22555

CVE-2021-22555 This repo hosts TUKRU's Linux Privilege Escalation exploit CVE-2021-22555. It demonstrates gaining root privileges via a vulnerability. Tested on Ubuntu 5.8.0-48-generic and COS 5.4.89+. Use responsibly and ethically. CVE-2021-22555: Linux Privilege Escalation Exploit This reposito...

parallels-file-move-privesc

parallels-file-move-privesc This repository contains an exploit for CVE-2023-50226 / ZDI-CAN-21227, which can be used to escalate privileges to root using Parallels Desktop on versions before 18.3.2...

CVE-2026-0092

CVE-2026-0092 In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. NVD - CVE-2026-0092 Android...

CDK

CDK - Kit de Penetración de Contenedores Sin Dependencias Inglés | 简体中文 Aviso Legal El uso de CDK para atacar objetivos sin consentimiento mutuo previo es ilegal. CDK es solo para fines de pruebas de seguridad. Resumen CDK es un kit de penetración de contenedores de código abierto, diseñado para...

CVE-2024-7313

Shield Security Plugin Vulnerability Exploit CVE-2024-7313 Overview This repository contains a Python PoC script designed to exploit a reflected XSS vulnerability in the Shield Security Plugin for WordPress, affecting versions below 20.0.6. The vulnerability CVE-2024-7313 allows an attacker to...

CVE-2026-49176_BOF

CVE-2026-49176 Cobalt Strike BOF Cobalt Strike Beacon Object File BOF for local privilege escalation via Windows WalletService CVE-2026-49176 , fixed July 2026. From a medium-integrity standard user Beacon, this tool stages a malicious Wallet ESE database, redirects Documents, triggers...

Dirty-Pipe

Dirty Pipe Exploit CVE-2022-0847 Overview This repository contains a Proof of Concept PoC exploit for the Dirty Pipe vulnerability CVE-2022-0847 , which affects Linux kernel versions 5.8 to 5.16. This vulnerability allows local privilege escalation by exploiting improper handling of pipe buffers ...

CVE-2020-28243

CVE-2020-28243 A command injection vulnerability in SaltStack's Salt allows for privilege escalation via specially crafted process names on a minion when the master calls restartcheck. For a full writeup please see this blog post Affected Versions: All versions between 2016.3.0rc2 and 3002.2 Link...

CVE-2021-33909

CVE-2021-33909 Secuoya Informe root@kitploit: gcc exploit.c -o exploit -lpthread -DBLOCKVIAUSERFAULTFD gcc exploit.hello.c -o exploit.hello -lpthread -lfuse -DFILEOFFSETBITS=64 root@kitploit: $ mkdir dir $ ./exploit $pwd/dir id...