duchamp-root

中文 | Español +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Usuario orgulloso de JetBrains Mono ⚡ Este README usa JetBrains Mono exclusivamente. Comic Sans está prohibida. !IMPORTANT 🚨 Aviso legal Est...

CVE-2026-13313

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected...

CVE-2026-13313

Certain ASUS router models are vulnerable to an Active Debug Code vulnerability. A remote authenticated user can send a crafted HTTP request to bypass security mechanisms and enable the Telnet service . This allows the attacker to execute arbitrary commands with root privileges , which could pote...

EUVD-2026-90454

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

CVE-2019-7192_QNAP_Exploit

Exploit de RCE root pre-auth en QNAP CVE-2019-7192 CVE-2019-7195 por ahora, puedes leer archivos del sistema /etc/shadow, clave privada ssh, etc. Uso: pip install -r requirements.txt or just pip install requests python3 gundy.py https://vulnerableurl:port Salida de ejemplo Vulnerabilidad Las...

CVE-2023-27216

CVE-2023-27216 - DLink Router This document is my personal experience of me - a newbie into firmware reversing and exploiting. Scope For demonstration, we will analyze and reproduce CVE-2023-27216. CVE number: CVE-2023-27216 Vulnerability description: An issue found in D-Link DSL-3782 v.1.03 allo...

TerraMaster-TOS-CVE-2020-15568

TerraMaster TOS CVE-2020-15568 Repository for CVE-2020-15568 Metasploit module Vulnerable Application Description A dynamic class method invocation vulnerability exists in file include/exportUser.php which leads to executing remote commands on TerraMaster devices with root privileges. The...

SharpCookieMonster

SharpCookieMonster .&@. .@@. &&&@ @/ @ @ & ,& &@@@@/ &/ @ &@ @@@@@@@@ @. @. @@/ @ @@@@@@@/ @, @@ @ @@@@@@@@ && %%/%%&//... /% @@@@@@@@ @ ,@///////@. .@..@, %@@ &/////@@. .&@/////////////////&@. &%///@. &/////////////////////////%@ @/////////////////////////////////////////////////@//&@...

CVE-2023-1389

Descripción CVE-2023–1389 es una vulnerabilidad de inyección de comandos no autenticada en el router WiFi TP-Link Archer AX21. Una devolución de llamada en el parámetro country utiliza la función popen , que se ejecuta como root, lo que permite al atacante inyectar valores arbitrarios a través de...

CVE-2017-1000367

CVE-2017-1000367 Descubrimos una vulnerabilidad en getprocessttyname de Sudo para Linux: esta función abre “/proc/pid/stat” man proc y lee el número de dispositivo del tty del campo 7 ttynr. Desafortunadamente, estos campos están separados por espacios y el campo 2 comm, el nombre del comando pue...

CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC

CVE-2024-32019 Netdata ndsudo Escalada de Privilegios PoC Resumen CVE-2024-32019 es una vulnerabilidad local de escalada de privilegios en el helper SUID ndsudo de Netdata que permite a un usuario local ejecutar programas arbitrarios como root a través de una ruta de búsqueda no confiable secuest...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

CVE-2021-38647-POC-and-Demo-environment

Detalles OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, anteriormente conocido como NanoWBEM es un servidor de gestión de código abierto del Modelo de Interfaz Común CMI de Microsoft y The Open Group. OMI es un agente de software presente en la mayoría de las máquinas virtuales Linux...

rootOS

rootOS Intenta usar varios CVEs para obtener acceso sudo o root. Todos los exploits tienen el objetivo final de agregar ALL ALL=ALL NOPASSWD: ALL a /etc/sudoers permitiendo que cualquier usuario ejecute comandos sudo. Ejecutar python root.py Exploits Nombre| CVE| Fecha| Enlaces ---|---|---|---...

Important: gvfs security update

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol FTP, Secure Shell File Transfer Protocol SFTP, Web Distributed Authoring and Versioning WebDAV, Common Internet File System CIFS, Server Message Block SMB, and...

PT-2026-103945

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...

opentsdb_key_cmd_injection

opentsdbkeycmdinjection Un exploit para OpenTSDB = 2.4.1 con inyección de comandos CVE-2023-36812/CVE-2023-25826 escrito en Fortran Acerca de Este es un exploit para una vulnerabilidad de inyección de comandos en OpenTSDB versiones 2.4.1 y anteriores CVE-2023-36812/CVE-2023-25826. El exploit está...

CVE-2018-16119

CVE-2018-16119: Ejecución Remota de Código Autenticada en TP-Link WR1043ND Resumen CVE-2018-16119 es una vulnerabilidad crítica de ejecución remota de código autenticada que afecta a los routers TP-Link TL-WR1043ND. Esta vulnerabilidad permite a atacantes autenticados ejecutar comandos arbitrario...

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

Summary Repo.init decides which directory is the git directory by testing candidate paths in an order that considers the real .git last. Two earlier tests can be satisfied by ordinary tracked files. Git reserves only the literal name .git, so HEAD, objects/, refs/, config, gitdir, commondir and...