copy-fail

Copy Fail PoC Proof of concept for CVE=2026-31431 These scripts elevate any regular user to root. Works on most Linux distros and CPUs. Technical writeup at https://copy.fail...

cpsniper

cPanelSniper CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection 4-stage exploit chain · Interactive WHM Shell · TRUE STABLE for 10M+ targets · Zero memory usage · stdlib only Overview cPanelSniper is a focused exploitation framework for CVE-2026-41940 , a critical...

copy-fail

copy-fail PoC of CVE-2026-31431 USAGE: wget https://raw.githubusercontent.com/pedromizz/copy-fail/main/poc.py python3 poc.py $ id uid=0root pedromizz :...

cpanelCVE-2026-41940

🔴 cPanelCVE CVE-2026-41940 — cPanel & WHM Authentication Bypass CVSS 10.0 Critical · Confirmed In‑The‑Wild · Auto Root Login 📖 Overview cPanelCVE is a proof‑of‑concept exploit for CVE-2026-41940, a critical session‑file CRLF injection vulnerability in cPanel & WHM that allows complete root...

unknownpwn.github.io

Tecnovision LED Video Wall Vulnerabilities and Exploits. From SQLi to full root access. Introduction: Tecnovision is a manufacturer of LED Video Walls used in arenas For example, Twickenham Stadium, concert halls, shopping malls, as roadsigns and much much more. DlxSpot Player 4 is the software...

Penetration-Testing-Walkthrough-Hacksudo-Thor

HackSudo Thor Full Penetration Testing Walkthrough Target: HackSudo Thor from VulnHub Objective: Gain root access and read /root/proof.txt Environment: Isolated VirtualBox lab segmented by a pfSense firewall Table of Contents Overview Network Topology Attack Chain Summary Phase 1: Passive...

MAL-014

MAL-014: Authenticated Arbitrary File Read in VMware vCenter Server The “com.vmware.appliance.version1.system.update.set” API component is vulnerable to a flag injection attack that can be leveraged with the “com.vmware.showlog” plugin in order to read arbitrary files as the “root” user on the...

DirtyCow

DirtyCow - Exploit Below code takes advantage of a known vulnerability Dirty COW CVE-2016-5195 to escalate privileges and get root access. Before running, uncomment sc for your platform within main.c. Compilation: gcc main.c -o dirtycow -lpthread...

Ashwesker-CVE-2026-20045

🚨 CVE-2026-20045 — Zero-Day Breakdown 🚨 🧨 What it is A critical remote code execution RCE vulnerability affecting multiple Cisco Unified Communications products. It was actively exploited in the wild before patches were released. 🔥 Why it’s dangerous 🚫 No authentication required 🖥️ Remote code...

copy-fail-CVE-2026-31431-php

CVE-2026-31431 Copy Fail PHP PoC www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php CVE-2026-31431.php id...

Hijacker

Hijacker Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng, MDK3 and Reaver. It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an ARM android device with ...

2026-41940-poc

CVE-2026-41940 - cPanel/WHM Authentication Bypass CVSS 9.8 | Unauthenticated root access via CRLF injection Usage python3 cp.py -t cpanel.target.com detect python3 cp.py -t cpanel.target.com --exploit exploit @nickpaulsec...

CVE-2026-31431-Copy-Fail

CVE-2026-31431-Copy-Fail xpl0ited by infrar3d This repository contains a proof‑of‑concept exploit for CVE-2026-31431 Copy Fail. CVE-2026-31431, known as "Copy Fail", is a high-severity Local Privilege Escalation LPE flaw in the Linux kernel that has been present for nearly a decade. It allows an...

CVE-2026-24061-GUI

CVE-2026-24061 Vulnerability Detection and Exploitation Tool Thank you🙏 for your Star support; Thank you🙏 for your usage and recognition; Program Overview This is a GUI tool for detecting and exploiting the CVE-2026-24061 vulnerability. This vulnerability is a GNU Inetutils telnetd authentication...

CVE-2023-42931

CVE-2023-42931 The exploit targets a LPE works on macOS 14.0-14.1.2, 13.0-13.6.2, 12.0-12.7.1 Usage chmod +x PoC.sh ./PoC.sh Credit This exploit is based on research from the original article: Local Privilege Escalating my way to root through Apple macOS filesystems. License This project is...

CVE-2026-24061

GNU InetUtils telnetd Argument Injection Authentication Bypass CVE-2026-24061 In January 2026, the GNU telnetd service from GNU InetUtils was found to be vulnerable to authentication-bypass byKyu Neushwaistein aka Carlos Cortes Alvarez. Tracked as CVE-2026-24061, this flaw allows an attacker to...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

cPanel-WHM-AuthBypass-Session-Checker

CVE-2026-41940 Session Validation Tool A companion tool for the watchTowr CVE-2026-41940 authentication bypass exploit. After running the main exploit against a cPanel/WHM target, this script validates whether the injected session actually grants authenticated access by testing multiple endpoints...

cve-2021-4034

CVE-2021-4034 this tool use for pkexec single command execute POC whoami test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 bytes from 8.8.8.8: icmpseq=1...

CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 Proof of Concept PoC ⚠️ DISCLAIMER: EDUCATIONAL PURPOSES ONLY ⚠️ This repository contains a Proof-of-Concept PoC exploit for CVE-2026-24061. It is intended strictly for educational purposes and for testing systems in a controlled lab environment. The author takes no responsibility...