CVE-2021-4034

CVE-2021-4034 polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall...

CVE-2021-4034-POC

CVE-2021-4034-POC POC for pwnkit vulnerability discovered by Qualys. Compile & execute: root@kitploit: gcc lpe.c -o lpe; ./lpe Creates the following directory/file structure: root@kitploit: /tmp ├── GCONVPATH=. │ └── test ├── payload.c ├── payload.so ├── test │ └── gconv-modules References...

CVE-2021-4034

CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Build To compile, just use make Note : CentOS 8 Stream doesn't have dev tools. Install them with: dnf groupinstall 'Development Tools' Usage Execute ./cve-2021-4034 If your distro is vulnerable you will get root!...

CVE-2026-33032

CVE-2026-33032 / MCPwn Non-destructive detection tooling for the nginx-ui MCP authentication bypass known publicly as MCPwn. Ship a two-HTTP-request unauthenticated takeover of any nginx-ui instance running a vulnerable version. Table of Contents 1. Quick Facts 2. Vulnerability Overview 3...

CVE-2021-4034

CVE-2021-4034 polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by my Qualys team here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: kali@user:/CVE-2021-4034$ make cc -Wall --shared -fPIC -o...

berdav-CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$...

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit — Updated!

🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework 📑 Table of Contents Legal Disclaimer & Ethical Notice Overview Key Capabilities Quick Start Guide Architecture & Feature Deep Dive Configuration Reference Automated Test Suite Remediation &...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation 根据CVE-2021-4034进行了加强，执行Exploit将会默认添加用户名rooter，密码Hello@World，并且rooter用户将具有sudo权限。 Refer to CVE-2021-4034, executing Exploit will add username rooter, password Hello@World by default, and The rooter user will have sudo...

pwnkit-exploit

pwnkit CVE-2021-4034 Privilege Escalation exploit sample This repository contains an exploit of CVE-2021-4034, a local privilege escalation in pkexec. This implementation is based on that described in the CVE disclosure, which you should read. If this works on your machine, it means you are...

CVE-2026-39842

CVE-2026-39842: OpenRemote Expression Injection RCE in Rules Engine TL;DR Critical remote code execution vulnerability in OpenRemote's Rules Engine allows authenticated users with write:rules role to execute arbitrary code on the server with root privileges. CVSS Score : 10.0 Critical CVSS Vector...

CVE-2026-68398

CVE-2026-68398: Ubuntu PPPoL2TP use-after-free to local root This repository contains a build-specific local privilege-escalation exploit for CVE-2026-68398 , a use-after-free race between PPPoL2TP receive processing and destruction of an unattached PPP channel. It was validated in QEMU against t...

codeql-sample-polkit

-- coding: utf-8 - - The polkit pkexec bug Overview This repository examines the polkit pkexec bug using CodeQL. It has instructions for building the databases the resultant databases a sequence of queries illustrating an approach to find this bug These are done: the polkit source / database buil...

security-research — Updated!

Security Research Vulnerabilities I have reported to the Apache Software Foundation, disclosed through the ASF security process. 46 CVEs across 15 projects , 2023 to 2026. Where a public reproducer exists it is linked. Each one is a minimal, self-contained project that demonstrates the issue and...

CVE-2026-0848-PoC-Improper-Input-Validation

CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ WARNING This code executes arbitrary commands on your system. Use ONLY in virtual machines or isolated containers. Description Functional PoC for CVE-2026-0848. Demonstrates how a malicious JAR file can execute arbitrary code when loaded by NLTK...

POC-CopyEscape-CVE-2026-17106

CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637 — AppleSEPKeyStore Use-After-Free CVE-2026-20637 · Enfilade · enfilade.io Component: AppleKeyStore Impact: An app may be able to cause unexpected system termination. Description: A use after free issue was addressed with improved memory management. —Apple Security Content, iOS 26.3...

CVE-2021-40438

CVE-2021-40438 Apache forward request CVE CVE-2021-40438: A crafted request uri-path can cause modproxy to forward the request to an origin server chosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. This CVE could be used to spoof the original IPs in DoS attacks...

cve-2026-31431-mitigation

CVE-2026-31431 seccomp Mitigation A lightweight, reversible seccomp-based mitigation for CVE-2026-31431, a local privilege escalation vulnerability in the Linux kernel's algifaead / authencesn crypto subsystem. 中文文档 Vulnerability Overview Type: Local Privilege Escalation LPE Affected Component:...

CVE-2024-56433

CVE-2024-56433 shadow-utils - Insecure default subordinate ID assignment for local users Summary The default subordinate ID assignment creates risk for collision with existing user ID's, creating potential for arbitrarily changing UID/GID and gaining unauthorized access to data and network...

Pixnapping-Attack-on-Android

This article examines the evolution of security threats in the cryptocurrency storage space, focusing on modern methods for compromising private keys and seed phrases, which secure digital wallets. The modern cryptocurrency ecosystem faces a growing threat of cyberattacks aimed at compromising...