CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 添加 Root 用户 - Pkexec 本地权限提升 根据CVE-2021-4034进行了加强，执行Exploit将会默认添加用户名rooter，密码Hello@World，并且rooter用户将具有sudo权限。 参考CVE-2021-4034，执行Exploit将默认添加用户名rooter，密码Hello@World，并且rooter用户将具有sudo权限。 用法 test@some:$ gcc cve-2021-4034.c -o ./exp test@some:$ ./exp /etc/passwd successfully...

NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Módulo de Metasploit Módulo de Metasploit de inyección de comandos del sistema operativo en InfoBlox Network Automation Producto: Network Automation NetMRI Switch Port Manager Automation Change Manager Security Device Controller Proveedor: InfoBlox Versiones vulnerables:...

polkadots

polkadots CVE-2021-3560 ローカル特権昇格エクスプロイト このエクスプロイトは、新しい特権ユーザーを作成し、それを使ってルートに昇格できます。 影響を受けるディストリビューション: RHEL 8 Fedora 21 Debian testing Bullseye Ubuntu 20.04 使用方法 ./polkadots -a Account -n Account name -h Password hash -i iterations ハッシュ化されたパスワードを生成: openssl passwd -6 password@123 デフォルト: -a boris -...

CVE-2025-57853

A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root...

CVE-2013-20005

Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious web pages. Attackers can forge POST requests to the /admin/adduser endpoint with parameters like username, password,...

CVE-2013-20005 Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduser

Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious web pages. Attackers can forge POST requests to the /admin/adduser endpoint with parameters like username, password,...

PT-2019-15942

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 devices affected versions not specified Description A security issue allows a normal user to create a root admin user from the D-Link portal, potentially leading to unauthorized access and control. Recommendations At the moment,...

CVE-2019-19743: Undefined Security Weakness

On D-Link DIR-615 devices, a normal user is able to create a rootadmin user from the D-Link portal...

Linux/x86-64 - Add root user with password - 390 bytes

No description provided by source. / Title: Linux/x86-64 - Add root user with password - 390 bytes Date: 2010-06-20 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/shellstorm ! Dtabase of shellcodes http://www.shell-storm.org/shellcode/ Add...