265824 matches found
CVE-2022-0847-DirtyPipe-Exploits
CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...
CVE-2025-5304
CVE-2025-5304 PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation š PT Project Notebooks ā¤ 1.1.3 ā Unauthenticated Privilege Escalation CVE-2025-5304 PoC & exploit helper for PT Project Notebooks versions 1.0.0ā1.1.3 : Missing authorization in...
CVE-2020-3153
CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP PoC Thanks to Yorick Koster for publishing details. This is a proof of concept for a path traversal vulnerability in Cisco AnyConnect Secure Mobility Client. Tested with Windows 7 and Windows 10 and AnyConnect version 4.5.x and 4.6.x. For...
kernel-exploits
Kernel Exploits Vari exploit del kernel CVE-2021-22555 Exploit Linux per root locale. Versione aggiornata dell'exploit di theflow per CVE-2021-22555. Una scrittura fuori dai limiti nella heap che riguarda Linux dalla v2.6.19-rc1 ĆØ stata scoperta in net/netfilter/xtables.c. CiĆ² consente a un...
WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from 1.9 through 6.3.0.1. id: CVE-2024-28000 info: name: WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin...
Atlassian Confluence - Privilege Escalation
Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence. id: CVE-2023-22515 info: name: Atlassian Confluence - Privilege Escalation author:...
Control Web Panel (CWP) - File Inclusion
In CWP Control Web Panel, previously CentOS Web Panel before version 0.9.8.1107, an unauthenticated attacker can abuse null byte %00 injection with the "scripts" parameter in the /user/loader.php or /user/login.php endpoints to register arbitrary API keys or access sensitive files. This can be...
Kramer VIAware - Privilege Escalation and Remote Code Execution
Kramer VIAware, all tested versions, allow privilege escalation and remote code execution due to misconfigured sudo permissions. Attackers can execute arbitrary system commands remotely if the web interface is accessible, due to vulnerabilities in the handling of privileged operations through...
Login as User or Customer < 3.3 - Privilege Escalation
The plugin lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session. id: CVE-2022-4305 info: name: Login as User or Customer 3.3 - Privilege Escalation author: r3Y3r53 severity: critical...
geojson2kml - Command Injection
Detects command injection vulnerability by checking if hacked.txt is created and contains the expected content. id: CVE-2020-28429 info: name: geojson2kml - Command Injection author: eeche,chae1xx1os,persona-twotwo,soonghee2 severity: critical description: | Detects command injection vulnerabilit...
Harbor <=1.82.0 - Privilege Escalation
Harbor 1.7.0 through 1.8.2 is susceptible to privilege escalation via core/api/user.go, which allows allows non-admin users to create admin accounts via the POST /api/users API when Harbor is setup with DB as an authentication backend and allows user to do self-registration. id: CVE-2019-16097...
root-my-s24
RootMyS24 Root without unlocking Ā· Samsung Galaxy S24 series S9210 / S9260 / S9280 + China Z Fold6 A security research project built on kernel vulnerability CVE-2026-43499 English Ā· ē®ä½äøę Ā· ē¹é«äøęļ¼å°ē£ļ¼ Ā· ē¹é«äøęļ¼é¦ęøÆļ¼ Security research notice: This project is intended solely for security research and the...
sunset-noontide-pentesting
Sunset: Noontide ā Penetration Testing A professional penetration testing assessment and CTF walkthrough of Sunset: Noontide , an intentionally vulnerable machine from VulnHub. This project documents the complete penetration testing lifecycle, including reconnaissance, service enumeration,...
couchdb-exploit
š CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution š Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| š“...
CVE-2024-48990-POC
CVE-2024-48990-POC Simple poc for CVE-2024-48990 privilege escalation vulnerability with needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt Overview This was desgined while working through the HackTheBox challenge, 'Conversor'. Slight modifications will be made to generali...
cve-2024-30088-binary-LPE-PRIVIELEGE-ESCALATION-CYGHT-TOCTOU
This repository does not have a README...
EUVD-2026-96567
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to modify department role permissions. Low-privileged attackers can submit roleId and permissionIds values to grant...
derpyc0w
Disclaimer I am not responsible for anything you do with this code. This code comes with no warranty. Description Exploit for CVE-2016-5195 which maps a readonly SUID executable to memory readonly and uses the race condition to overwrite it with an ELF of our choice. Payloads are available in NAS...
CVE-2024-11643
CVE-2024-11643 Accessibility by AllAccessible input type="hidden" name="optvalue" value="administrator"...
AlmaLinux 9.2 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.2:CLSA-2026:1791735799)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791735799 advisory. - In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers,...