CVE-2023-36407

CVE-2023-36407 This is poc for CVE-2023-36407, Hyper-V Elevation of Privilege Vulnerability. https://github.com/pwndorei/CVE-2023-36407/assets/96749184/a8ef87d3-e0d0-40e5-9b23-35ab057a9c78 Vulnerability OOB Read/Write from/to Non-paged Pool via winhvr.sys!WinHvGet/SetVpState Reproduction Steps...

USN-8914-1: Google Guest Agent, Google OS Config Agent vulnerability

It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could possibly use this issue to bypass...

USN-8914-1 google-guest-agent, google-osconfig-agent vulnerability

It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could possibly use this issue to bypass...

CVE-2026-2631

CVE-2026-2631 Datalogics Ecommerce Delivery – Datalogics PoC / Exploit Script: CVE-2026-2631.py Author: Khaled Alenazi Nxploited – Nxploited ZeroDay Hub Contact: Telegram: @Kxploit 🧬 Vulnerability Overview Plugin: Datalogics Ecommerce Delivery – Datalogics WordPress Affected Versions: 2.6.60...

CVE-2024-34221

Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vulnerability Insecure permission Description There is an insecure permission vulnerability in /hrm/controller/ccity.php?positionedit= in the SourceCodester Human Resource Management System 1.0, allowing...

CVE-2022-37704

Suggested description Amanda 3.5.1 has a flaw that allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of...

CVE-2025-6019-exploit

CVE-2025-6019: Privilege Escalation Exploit via UDisks2 Filesystem Resize Vulnerability Details CVE ID : CVE-2025-6019 Impact : Local Privilege Escalation LPE Affected Systems : Linux systems with vulnerable udisks2 versions Mechanism : Race condition during filesystem resize allows access to SUI...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.4 MFSA 2026-96, MFSA 2026-103, bsc1280371, bsc1282929: CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92006: Privilege escalation due to incorrect boundary condition...

SUSE-SU-2026:4627-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.4 MFSA 2026-96, MFSA 2026-103, bsc1280371, bsc1282929: - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation due to incorrect boundary...

CVE-2019-19033

CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authentication Bypass I. VULNERABILITY Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. II. CVE REFERENCE...

cve-2020-0796

CVE-2020-0796 LPE CVE-2020-0796 SMBGhost LPE Usage Install Rust if you need it https://www.rust-lang.org/learn/get-started Compile the code: cargo build --release Copy the .exe from target/release/ to target and execute. References...

CVE-2023-42931

CVE-2023-42931 The exploit targets a LPE works on macOS 14.0-14.1.2, 13.0-13.6.2, 12.0-12.7.1 Usage chmod +x PoC.sh ./PoC.sh Credit This exploit is based on research from the original article: Local Privilege Escalating my way to root through Apple macOS filesystems. License This project is...

CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

CVE-2025-29824-Exploit

🚨 CVE-2025-29824 Exploit: PipeMagic Ransomware Chain 📌 Critical Vulnerability Overview Privilege Escalation Flaw in Windows CLFS → SYSTEM Privilege Hijack Exploited in Active Ransomware Attacks by Storm-2460 Threat Group 🖥️ Affected Systems Expand System List 🧩 Exploit Chain Workflow graph LR...

CVE-2019-8561

CVE-2019-8561 Proof of concept exploit for CVE-2019-8561 discovered by Jaron Bradley @jbradley89 Patched in macOS 10.14.4. This script exploits a TOCTOU bug in installer which enables code execution as root. See Jaron's Objective By the Sea v2 talk "Bad Things in Small Packages" where he...

CVE-2021-1732

CVE-2021-1732 CVE-­2021­-1732 Microsoft Windows 10 local privilege escalation vulnerability research and PoC/Exploit development Affected systems and application versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64­based Systems Windows 10 Version 20H2...

CVE-2025-27591

CVE-2025-27591 - Privilege Escalation via below This repository contains an exploit for CVE-2025-27591 , a privilege escalation vulnerability in the Linux monitoring tool Below. 🛠️ Vulnerability Details CVE : CVE-2025-27591 CVSS Score : 7.8 High Affected Tool : below prior to v0.9.0 Vulnerability ...

CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE

🚨 CVE‑2025‑53770 – SharePoint Zero-Day Variant Exploited for Full RCE A Critical Escalation from CVE‑2025‑49706 By Aditya Bhatt – Red Team | VAPT 📌 TL;DR CVE‑2025‑53770 is a critical CVSS 9.8 zero-auth RCE vulnerability in Microsoft SharePoint now actively exploited in the wild. This isn’t a...

CVE-2024-5009

CVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation CVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance. Installation git clone https://github.com/th3gokul/CVE-2024-5009.git cd CVE-2024-5009 pip install -r requirements.txt...

CVE-2018-19788

CVE-2018-19788 Silly easy exploit for CVE-2018-19788 To use this, you must either create a user with UID INTMAX in Policy Kit or already have a low-priv user with said UID. UID can be specified in user creation as follows, and used before execution of the script: $ useradd -u 4000000001 PrivEsc $...