CVE-2025-25618

CVE-2025-25618 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to change the Section Name and Room Number — permissions that should be restricted to administrators. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to th...

-Linux-PrivEsc-CVE-2024-48990

Privesc-need-restart-2024-48990 Exploit Explanation CVE-2024-48990 - Pure Python This script exploits the CVE-2024-48990 vulnerability in the needrestart Linux utility through library path hijacking PYTHONPATH hijacking. Unlike the original vector, this method uses exclusively Python, bypassing t...

CVE-2022-25365

CVE-2022-25365 The privilege escalation vulnerability in Docker Desktop for Windows reference: https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1 File list poc.py Coded by followboy1999 createsymlink.exe...

Android-rce-analizi

CVE Research and PoC Laboratory — Android Security Analysis 👨‍🏫 Advisor Information Name and Surname| Keyvan Arasteh ---|--- GitHub| @keyvanarasteh E-mail| [email protected] LinkedIn| keyvanarasteh Web Site| qline.tech 👤 Student Information Name and Surname| Baha Furkan Yıldız ---|--- Student...

CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - Falta de autorización para actualización de opciones arbitrarias Descripción El plugin Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX para WordPress es vulnerable a la modificación no...

CVE-2020-25637-libvirt-double-free

root@kitploit: CVE-2020-25637 root@kitploit: Descripción Se produjo un problema de doble liberación de memoria en la API libvirt, en versiones anteriores a la versión 6.8.0, encargada de solicitar información sobre las interfaces de red de un dominio QEMU en ejecución. Esta falla afecta al...

CVE-2019-0211-exploit

CVE-2019-0211 — Apache HTTP Server Local Privilege Escalation CARPE DIEM Descripción CVE-2019-0211 es una vulnerabilidad de escalada de privilegios local que afecta a Apache HTTP Server entre las versiones 2.4.17 y 2.4.38 con modprefork y modphp o PHP-FPM. La vulnerabilidad permite a un atacante...

CVE-2024-29399

CVE-2024-29399 Vulnerability Details Overview In Savane v3.13 and prior, a lack of validation on uploaded files can allow for privilege escalation. Web servers configured according to the installation instructions are vulnerable to Cross-Site Scripting XSS. In misconfigured web servers this can...

CVE-2026-49083

CVE-2026-49083 CVE-2026-49083 LatePoint Calendar Booking Plugin Privilege Escalation Exploit 🎲🎲🎲...

CVE-2026-40463

WaveSuite (Nokia) is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. An authenticated low-privilege user can load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser, resulting in a CVSS 3.1 score...

EUVD-2026-68372

WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser...

CVE-2026-40463 An Insufficient Role-based Access Control Vulnerability in WaveSuite

WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 es un problema de seguridad en el firmware del hipervisor de algunos conjuntos de chips antiguos de Qualcomm. Un componente de hardware desprotegido el "boot remapper" puede ser abusado para obtener acceso completo de lectura/escritura al hipervisor desde un sistema...

CVE-2024-45264

CVE-2024-45264 Suggested description A cross-site request forgery CSRF vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3132 allows remote attackers to add a new administrator, leading to escalation of privileges. Vulnerability Type CWE-352 | Cross Site Request Forgery CSRF Vendo...

CVE-2024-28000-Exploit-Lab

CVE-2024-28000 — Laboratorio LiteSpeed Cache de WordPress Reproducción autorizada en laboratorio local de CVE-2024-28000 , un problema de escalada de privilegios no autenticada que afecta a versiones vulnerables del plugin LiteSpeed Cache de WordPress. Alcance: Este repositorio documenta pruebas...

CVE-2026-31431-C

copy-fail CVE-2026-31431 Copy Fail C language PoC, logically aligned with the original Python exploit theori-io/copy-fail-CVE-2026-31431. For authorized security research and experimental environments only. Do not use on unauthorized systems. Brief Principle In Linux AFALG,...

CVE-2019-14287-write-up

CVE-2019-14287-write-up 4294967295 Sudo Bug Allows Restricted Users to Run Commands as Root DEMONSTRATION OF VULNERABILITY Add a new user: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // add password to user visudo Add a new entry test ALL=ALL, !root /usr/bin/id // specifying...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console AMC of SonicWall Secure Mobile Access SMA 1000 series appliances. The vulnerability stems from insufficient authorization in the AMC, allowing authenticated remote attackers to escalate...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Análisis práctico de CVE‑2025‑62215, una condición de carrera en el kernel de Windows explotada en el mundo real. Demuestra la elevación de privilegios a SYSTEM, scripts de detección y estrategias de validación de parches par...

cve-2019-2215

CVE-2019-2215 Temproot para Pixel 2 y Pixel 2 XL mediante CVE-2019-2215 Basado en una prueba de concepto de Jann Horn y Maddie Stone de Google Project Zero Resumen Demostración de un ataque de escalada de privilegios de solo lectura/escritura en memoria del kernel que resulta en un shell root...