CVE-2022-37706

CVE-2022-37706 Exploit: Enlightenment v0.25.3 Privilege Escalation Description This repository contains an exploit for CVE-2022-37706 , a local privilege escalation vulnerability in Enlightenment v0.25.3 and earlier. The vulnerability exists due to improper handling of pathnames starting with the...

CVE-2023-4911-Lab

CVE-2023-4911 "Looney Tunables" Analysis Environment Docker-based practice environment for analyzing and developing exploits for the GNU C Library glibc dynamic loader buffer overflow vulnerability Local Privilege Escalation. CVE Information Item| Content ---|--- CVE Number| CVE-2023-4911 Alias|...

CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation

🚨 CVE-2024-32019 - Netdata ndsudo PATH Vulnerability Exploit LPE to Root A Python-based exploit for CVE-2024-32019 , a high-severity Local Privilege Escalation vulnerability in the Netdata Agent , leveraging a misconfigured SUID binary ndsudo that fails to securely handle the PATH environment...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 This exploit uses addresses and shellcode for Citrix VPX 13.1-48.47. For the full writeup, click here. Usage NASM is required to build the shellcode. $ sudo apt install nasm The included shellcode will download and run a shell script from a remote https server. The...

CVE-2021-4034

CVE-2021-4034 This is a PoC for PwnKit Local Privilege Escalation Vulnerability that was discovered by Qualys Security Team. The Qualys Research Team has discovered a memory corruption vulnerability in polkit’s pkexec, a SUID-root program that is installed by default on every major Linux...

OverRide

OverRide Explore disassembly, binary exploitation & reverse-engineering through 10 little challenges. In the folder for each level you will find: flag - password for next level README.md - how to find password source.c - the reverse engineered binary dissasemblynotes.md - notes on asm See the...

CVE-2026-53613-poc

CVE-2026-53613 PoC TOCTOU vulnerability in mount8 allowing local privilege escalation to root. Vulnerable Versions util-linux 2.41.0 through 2.41.4 util-linux 2.42.0 through 2.42.1 Exploits File| Method| Target ---|---|--- exploitshell.sh| SSH key extraction| /root exploitdirectshell.sh| Direct...

CVE-2026-31431

🔐 CVE-2026-31431 - Kernel Exploitation Research Framework Modular framework for studying a Linux privilege escalation LPE vulnerability based on AFALG + Page Cache Injection techniques. 🎯 Objective This project is designed for: Research of Linux kernel vulnerabilities Teaching real exploitation...

CVE-2012-0056

Linux Local Privilege Escalation via SUID /proc/pid/mem Write Mempodipper Introducing Mempodipper, an exploit for CVE-2012-0056. /proc/pid /mem is an interface for reading and writing, directly, process memory by seeking around with the same addresses as the process's virtual memory space. In...

copy-fail

Copy Fail PoC English Python PoC for CVE-2026-31431 , intended for controlled laboratory testing on authorized Linux systems. For use only in your own environments, labs, or systems where you have explicit permission. Do not run this code against third-party systems. Description copy-fail.py chec...

copy-fail-CVE-2026-31431-shell

CVE-2026-31431 - copyfail shell Local privilege escalation via AFALG socket + splice page-cache overwrite. Overwrites a read-only SUID binary /usr/bin/su with a minimal ELF that calls setuid0 + execve"/bin/sh". No race condition, no per-distro offsets, single shot. $ ./copyfailexp.sh Kernel:...

CVE-2022-37706

CVE-2022-37706 Hello guys, this time I'm gonna talk about a recent 0-day I found in one of the main window managers of Linux called Enlightenment https://www.enlightenment.org/. This 0-day gonna take any user to root privileges very easily and instantly. The exploit is tested on Ubuntu 22.04, but...

CVE-2022-37706-LPE-exploit

CVE-2022-37706 Hello guys, this time I'm gonna talk about a recent 0-day I found in one of the main window managers of Linux called Enlightenment https://www.enlightenment.org/. This 0-day gonna take any user to root privileges very easily and instantly. The exploit is tested on Ubuntu 22.04, but...

Dirty-Pipe

Dirty Pipe Exploit CVE-2022-0847 Overview This repository contains a Proof of Concept PoC exploit for the Dirty Pipe vulnerability CVE-2022-0847 , which affects Linux kernel versions 5.8 to 5.16. This vulnerability allows local privilege escalation by exploiting improper handling of pipe buffers ...

perf-exploiter

perf-exploiter CVE-2014-2630 In one of our recent penetration tests we have abused a vulnerability affecting a suid binary called "xglance-bin". Part of HP Performance Monitoring solution , it allowed us to escalate our local unprivileged sessions on some Linux RHEL 7.x/8.x systems to root. To be...

CVE-2022-37703

Suggested description In Amanda 3.5.1, an information leak vulnerability was found in calcsize SUID binary. The attacker can abuse the vulnerability to know if a directory exist or not anywhere in the fs. The binary will use opendir as root directly without checking the path, letting the attacker...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2025-6019-exploit

CVE-2025-6019: Privilege Escalation Exploit via UDisks2 Filesystem Resize Vulnerability Details CVE ID : CVE-2025-6019 Impact : Local Privilege Escalation LPE Affected Systems : Linux systems with vulnerable udisks2 versions Mechanism : Race condition during filesystem resize allows access to SUI...

CVE-2022-21392

CVE-2022-21392: Local Privilege Escalation via NMR SUID in Oracle Enterprise Manager In Oracle installations, where the “nmr” binary is present and SUID-ed as “root”, due to insecure directory permissions, the “oracle” user can elevate his/her privileges to that of the “root” user by replacing th...

SUIDGuard

SUIDGuard - A kernel extension adding mitigations to OS X to make exploitation harder Copyright c Stefan Esser / SektionEins GmbH, 2015. All rights reserved. [email protected] - https://www.sektioneins.de/ OFFICIAL WEBSITE If you came here from a media article please checkout the official...