77153 matches found
CVE-2022-37706
CVE-2022-37706 The CVE-2022-37706 vulnerability is related to the Enlightenment window manager, specifically the enlightenmentsys binary. This binary has the SUID Set User ID bit enabled, meaning it can be executed with elevated privileges usually as the root user. Summary: Vulnerability :...
CVE-2019-9624
CVE-2019-9624 Authenticated RCE for Webmin 1.9.0 Webmin 1.900 Authenticated RCE - CVE-2019-9624 Exploit 1. Vulnerability Description CVE-2019-9624 is an authenticated Remote Code Execution RCE vulnerability in Webmin versions up to 1.900. It allows an administrative user to execute arbitrary...
CVE-2026-24061-GNU-InetUtils-telnetd
CVE-2026β24061 : GNU InetUtils telnetd Authentication Bypass Vulnerability CVE-2026β24061 is a critical weakness in the telnetd service of GNU InetUtils CVE ID : CVE-2026β24061 Severity : Critical CVSS 9.8 Attack Vector : Network Authentication Required : None Impact : Full system compromise root...
xiaomi15-dada-cve-2026-64560
Xiaomi 15 dada CVE-2026-64560 Adattamento specifico per dispositivo del proof of concept Android NebuSec CVE-2026-64560 per una build esatta di Xiaomi 15. Fornisce accesso root temporaneo per il boot corrente tramite un helper accessibile solo da ADB shell. !WARNING Questo Γ¨ codice sperimentale d...
SUDO-privilege-escalation
SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...
CVE-2026-52832-PoC-exploit-nuclio-dashboard
CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard NOP mode accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root...
CVE-2025-63296
CVE-2025-63296 Summary KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and...
sendmail-clamav-exploit-CVE-2007-4560
Sendmail + ClamAV-Milter Exploit CVE-2007-4560 Python RCE exploit for Sendmail with ClamAV-Milter After successful exploitation: nc 1001 bash -i Tested On Sendmail 8.13.4/8.13.4/Debian-3sarge3 ClamAV-Milter 0.91.2 References Original exploit: https://www.exploit-...
CVE-2026-11318
CVE-2026-11318: Local Privilege Escalation in DeskIn macOS Client Vendor: DeskIn Product: DeskIn macOS Client Affected Versions: = v3.3.4.3 Overview A Local Privilege Escalation LPE vulnerability has been identified in the DeskIn macOS client. This vulnerability allows an unprivileged local user ...
CVE-2018-20162-digi-lr54-restricted-shell-escape
layout: post title: "CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape" author: sgo category: security The Digi TransPort LR54 is a high speed LTE router commonly used by industry, infrastructure, retail and public transportation. It supports running python scripts in a restricted...
CVE-2025-67888
CVE-2025-67888 Control Web Panel = 0.9.8.1208 admin/index.php OS Command Injection Vulnerability Affected Versions: Version 0.9.8.1208 and prior versions. Vulnerability Description: User input passed via the "key" GET parameter to /admin/index.php when the "api" parameter is set is not properly...
cve-2024-3400-panos_rce_reproduction
CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injection RCE CVSS 10.0 CRITICAL | CWE-78: OS Command Injection | Mass Exploited In The Wild Overview CVE-2024-3400 is a pre-authentication command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway interface...
FolkPatch
π README Language: English / δΈζ / ζ₯ζ¬θͺ FolkPatch - A Root management tool focused on interface optimization and feature extension Built on KernelPatch, FolkPatch delivers a stable Root experience along with a brand-new interface and a three-tier extension system: APM / KPM / Plugins. Get started...
APatch
APatch The patching of Android kernel and Android system. A new kernel-based root solution for Android devices. APM: Support for modules similar to Magisk. KPM: Support for modules that allow you to inject any code into the kernel Provides kernel function inline-hook and syscall-table-hook. APatc...
CVE-2020-9470
ΒΏQuΓ© es esto? Wing FTP Server 6.2.5 - Escalada de Privilegios IntroducciΓ³n Una debilidad en el manejo de sesiones HTTP dentro de Wing FTP Server permite a cualquier usuario local escalar privilegios a root en Linux, MacOS y Solaris. La explotaciΓ³n depende de una sesiΓ³n administrativa ya...
CVE-2024-33775
CVE Discovered by: K. Wahab NeoX Vulnerability Details: Product: Nagios XI Version 2024R1.01 Vulnerability: Privilege Escalation from Users "NAGIOS" or "APACHE" Result: Full root access on the target system CVE: https://vulners.com/cve/CVE-2024-33775 Exploit: RSS Dashlet is used in this example...
DeepRoot
CVE-2021-3493 Comprehensive Exploit Framework $\colorFF4D2E \textbf\textsfDeepRoot$ OverlayFS Capability Privilege Escalation Framework - Red Team Professional Edition Overview DeepRoot framework is a comprehensive privilege escalation exploit for CVE-2021-3493 OverlayFS Privilege Escalation with...
SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2
SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Description This project documents my penetration testing engagement as part of the CMIT 386 course at UMGC. It focuses on exploiting the Samba SMB usermapscript vulnerability CVE-2007-2447 on Metasploitable 2...
CVE-2019-14287-demo
CVE-2019-14287 Demo Container This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. This container can be run with: docker run -ti cashwilliams/cve-2019-14287-demo Configuration...
