NimbusPWN-CVE-2022-29799-29800

NimbusPwn — networkd-dispatcher !NOTE Other distros: dnf install gcc dbus-devel pkgconf Fedora/RHEL or pacman -S gcc db...

needrestart-privesc-cve-2024-48990

Escalada de Privilegios en needrestart CVE-2024-48990 Este repositorio contiene un exploit mínimo de escalada de privilegios local que apunta a una vulnerabilidad en needrestart CVE-2024-48990. La vulnerabilidad permite la ejecución arbitraria de código Perl como root al abusar de la opción de...

CVE-2020-8250

CVE-2020-8250: Escalada de Privilegios mediante Inyección de Comandos en el Cliente Linux de Pulse Secure VPN El ejecutable SUID root pulsesvc tiene una función “doupload” que pasa de forma insegura la variable de entorno “HOME” a “system”. Al alterar la variable “HOME” para que contenga caracter...

pwnkit_safety_check

What is PwnKit PwnKit exploits a vulnerability in the SUID-root program /usr/bin/pkexec, allowing unprivileged users to gain full root privileges on Linux systems. This vulnerability has existed since 2009 and was publicly disclosed in January 2022. pwnkitsafetycheck.c PwnKit CVE-2021-4034 Safe...

cve-2024-32019-PoC

CVE-2024-32019 — Netdata ndsudo Local Privilege Escalation Summary Netdata’s ndsudo helper installed setuid root restricts which commands it will run, but resolves those commands using the caller’sPATH. In impacted versions, a local user can place a malicious binary earlier in PATH and have ndsud...

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

Lenovo IdeaTab A1000G — Root Note: This documentation and exploit code was generated with AI assistance Kiro. Verify before use — AI can and does make mistakes. Device Field| Value ---|--- Model| Lenovo IdeaTab A1000G SoC| MediaTek MT8317 = MT6517 CPU| Dual-core Cortex-A9 @ 1.2GHz Kernel| Linux...

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Proyecto original : berdav/CVE-2021-4034 Este proyecto es una versión analizada y modificada del original con fines educativos. Cumplimiento de la licencia MIT | Tarea educativa de White Hat School 📋 Descripción general CVE-2021-4034 es una...

PwnKit-Vulnerability_CVE-2021-4034

PwnKit Vulnerability - Local Privilege Escalation Title: PwnKit Vulnerability - Local Privilege Escalation Target: Linux Category: Execution Credits: Qualys Research Team Description The Qualys Research Team has discovered a memory corruption vulnerability in polkit’s pkexec, a SUID-root program...

CVE-2021-4034

CVE-2021-4034 Exploit for the pwnkit vulnerability from the Qualys team. This exploit assumes that gcc is present on the target machine. root@kitploit: $ id uid=1001ayrx gid=1002ayrx groups=1002ayrx,27sudo $ ./setup.sh Run the following command in one bash session: root@kitploit: while :; do mv...

CVE-2025-6019

CVE-2025-6019: Vulnerabilidad de escalada de privilegios locales en libblockdev Resumen CVE-2025-6019 es una vulnerabilidad de escalada de privilegios locales LPE descubierta en la librería libblockdev, que actúa en conjunto con el demonio udisks2 y Polkit. Descripción de la vulnerabilidad Un...

CVE-2025-6019-Exploitation

CVE-2025-6019 – Vulnerabilidad ResizeFilesystem de UDisks2 Reproducción Educativa Este repositorio documenta una reproducción educativa de CVE-2025-6019 realizada en un entorno de laboratorio controlado VM de Ubuntu, no productivo. 🛡️ Aviso de Seguridad Esta investigación reproduce CVE-2025-6019 e...

CVE-2026-41651

CVE-2026-41651 root@kitploit: CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 Escalada local de privilegios mediante una condición de carrera TOCTOU en el manejador de transacciones D-Bus de PackageKit. Cualquier usuario local...

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

Lenovo IdeaTab A1000G — Root Nota: Questa documentazione e il codice exploit sono stati generati con l'assistenza dell'AI Kiro. Verifica prima dell'uso — l'AI può e commette errori. Dispositivo Campo| Valore ---|--- Modello| Lenovo IdeaTab A1000G SoC| MediaTek MT8317 = MT6517 CPU| Dual-core...

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

AZL-97932 CVE-2026-56135 affecting package ntfs-3g for versions less than 2022.10.3-4

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

CVE-2026-56135

CVE-2026-56135 is a heap-based buffer overflow in the build_inherited_id() function of libntfs-3g/security.c, affecting NTFS-3G through 2026.2.25 . An attacker can trigger the overflow by crafting a malicious NTFS image and creating a file within a crafted directory, leading to heap memory corrup...

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

openSUSE 16: libntfs-3g-devel / libntfs-3g89 / ntfs-3g / ntfsprogs / etc (openSUSE-SU-2026:21484-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21484-1 advisory. - CVE-2026-42616: heap buffer overflow in cat of cat.c can lead to heap corruption in the ntfscat binary via a specially crafted NTFS image...