73274 matches found
cve-2021-4034
cve-2021-4034 PoC para cve-2021-4034 Basado en el PoC de https://haxx.in: https://haxx.in/files/blasty-vs-pkexec.c. Probablemente él es https://github.com/blasty?! No lo sé. Con una pequeña ayuda de https://github.com/daimoniac ¿Cómo usar? Compilar cve-2021-4034.c gcc -Wall cve-2021-4034.c -o...
opentsdb_key_cmd_injection
opentsdbkeycmdinjection Un exploit para OpenTSDB = 2.4.1 con inyección de comandos CVE-2023-36812/CVE-2023-25826 escrito en Fortran Acerca de Este es un exploit para una vulnerabilidad de inyección de comandos en OpenTSDB versiones 2.4.1 y anteriores CVE-2023-36812/CVE-2023-25826. El exploit está...
traitor
Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...
ctf
CTF Related stuff Table of Contents The challs are linked in the table below. Description| Event/Game| Solution ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| An exe with a "login" functionality with the password in plain text in the memory. Blackbox| Level 2| An exe with setuid for...
CVE-2026-91191
The Lantronix G520 Series Cellular Gateway is vulnerable to an improper verification of cryptographic signatures in its update mechanism. During boot, the stock done function disables signature verification in the OPKG configuration before restoring packages from an unsigned feed. Furthermore, th...
CVE-2026-91191 Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature
The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...
CVE-2026-84409 Lantronix G520 Series Cellular Gateway Cross-site Scripting
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...
CVE-2026-84409
The Lantronix G520 Series Cellular Gateway is vulnerable to a Cross-site Scripting (XSS) flaw in its update mechanism. The device retrieves update metadata over an unencrypted HTTP connection and stores it; a management interface then returns this data in a JSON response, which the web interface ...
cnitch
cnitch cnitch snitch o container snitch es un framework simple y una herramienta de línea de comandos para monitorear contenedores Docker con el fin de identificar cualquier proceso que se esté ejecutando como root. ¿Por qué es malo esto? Si aún no has visitado ¿Puedo tener contenedores no...
CVE-2016-5195
dirtycow This exploit uses the pokemon exploit of the dirtycow vulnerability as a base and automatically generates a new passwd line. The user will be prompted for the new password when the binary is run. The original /etc/passwd file is then backed up to /tmp/passwd.bak and overwrites the root...
CVE-2025-32463-Chwoot-POC
CVE-2025-32463 PoC de Exploit de Escalada de Privilegios en Sudo Rust Usando el binario precompilado 1. Clona el repositorio y ejecuta el binario en la máquina objetivo. git clone https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC.git cd CVE-2025-32463-Chwoot-POC ./exploit Compilar desde e...
CVE-2026-76732
A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the...
CVE-2017-16995
CVE-2017-16995 tested for Ubuntu 16.04.01 - Linux 4.4.0-31-generic 50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016 x8664 This vulnerability allow a simple user to do a privilege escalation and get a root shell if different kernel adjust CRED offset + check kernel stack size...
CVE-2016-4669
CVE-2016-4669 Imperfect exploit code, for learning purposes only : 1 Compilation method Just run make 2 Function If successful, it can obtain root privileges. But the success rate is not high. 3 General overview Relatively stable creation of a dangling port. Cannot stably reuse the port with root...
cookie_crimes
Extracción de cookies de Chrome sin ser root Esto imprimirá las cookies de Chrome de un usuario. No necesitas su contraseña ni ser root para usarlo. genial genial genial genial genial. Si no eres del tipo de persona que regularmente obtiene la capacidad de ejecutar código en las computadoras de...
Poc-CVE-2024-57040
Poc-CVE-2024-57040 CVE-2024-57040 es una vulnerabilidad de seguridad encontrada en ciertos modelos de enrutadores TP-Link TL-WR845N. Específicamente, implica una contraseña "hardcodeada" para la cuenta root del enrutador. Esto significa que una contraseña predeterminada e inmutable está incorpora...
CVE-2026-76732 Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON
A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the...
CVE-2026-76732
A local privilege-escalation vulnerability exists in a daemon of HPE Networking Instant ON . If successful, a local attacker could achieve arbitrary code execution with root privileges , provided that certain preconditions outside of the attacker's control are met. No specific exploit details or ...
EUVD-2026-89351
A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the...