265824 matches found
Harbor <=1.82.0 - Privilege Escalation
Harbor 1.7.0 through 1.8.2 is susceptible to privilege escalation via core/api/user.go, which allows allows non-admin users to create admin accounts via the POST /api/users API when Harbor is setup with DB as an authentication backend and allows user to do self-registration. id: CVE-2019-16097...
root-my-s24
RootMyS24 Root without unlocking ยท Samsung Galaxy S24 series S9210 / S9260 / S9280 + China Z Fold6 A security research project built on kernel vulnerability CVE-2026-43499 English ยท ็ฎไฝไธญๆ ยท ็น้ซไธญๆ๏ผๅฐ็ฃ๏ผ ยท ็น้ซไธญๆ๏ผ้ฆๆธฏ๏ผ Security research notice: This project is intended solely for security research and the...
sunset-noontide-pentesting
Sunset: Noontide โ Penetration Testing A professional penetration testing assessment and CTF walkthrough of Sunset: Noontide , an intentionally vulnerable machine from VulnHub. This project documents the complete penetration testing lifecycle, including reconnaissance, service enumeration,...
couchdb-exploit
๐ CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution ๐ Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| ๐ด...
CVE-2024-48990-POC
CVE-2024-48990-POC Simple poc for CVE-2024-48990 privilege escalation vulnerability with needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt Overview This was desgined while working through the HackTheBox challenge, 'Conversor'. Slight modifications will be made to generali...
cve-2024-30088-binary-LPE-PRIVIELEGE-ESCALATION-CYGHT-TOCTOU
This repository does not have a README...
EUVD-2026-96567
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to modify department role permissions. Low-privileged attackers can submit roleId and permissionIds values to grant...
derpyc0w
Disclaimer I am not responsible for anything you do with this code. This code comes with no warranty. Description Exploit for CVE-2016-5195 which maps a readonly SUID executable to memory readonly and uses the race condition to overwrite it with an ELF of our choice. Payloads are available in NAS...
CVE-2024-11643
CVE-2024-11643 Accessibility by AllAccessible input type="hidden" name="optvalue" value="administrator"...
AlmaLinux 9.2 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.2:CLSA-2026:1791735799)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791735799 advisory. - In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers,...
VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC
VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC This is my malware. I use the CVE 2023-38831, a kind of exploit on WinRAR, to do this malware. I also use BypassUAC to get Administrator authority. This is the OVA file of it:...
CVE-2023-1829
CVE-2023-1829 The exploitation is tested on Ubuntu22.04 official source code 5.15.0-25.25 Installing dependences for some netlink filter functions sudo apt install libnftnl-dev libmnl-dev Building step: make References https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/main...
CVE-2025-29471
Stored XSS Vulnerability in Nagios Log Server Privilege Escalation to Admin โถ๏ธ PoC Demo Date: 2025-04-02 Exploit Author: Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...
CVE-2021-3156-Baron-Samedit
CVE-2021-3156 โ Baron Samedit Heap-Based Buffer Overflow in sudo | Exploitation & Mitigation Analysis Overview CVE-2021-3156, known as Baron Samedit , is a heap-based buffer overflow vulnerability in the sudo program. It allows any unprivileged local user to gain root privileges on vulnerable...
gameoverlay
Gameoverlay shell code for privilege escalation root on UBUNTU. Ubuntu: 23.04 22.10 22.04 not v5.15.0 20.04 v.5.4.0 for 32629 18.04 v.5.4.0 for 32629 run with ./overlay.sh...
CVE-2020-5752
CVE-2020-5752: Druva inSync Local Privilege Escalation A C-based exploit for the Druva inSync Windows Client v6.6.3 and below. The application exposes an RPC service on port 6064 that is vulnerable to command injection via path traversal. This allows a local user to execute arbitrary commands as ...
CVE-2021-21551
PoC for CVE-2021-21551 Windows LPE using the Dell dbutil23.sys driver. Exploit approach Implement read/write, allocate shellcode, flip page to bypass smep, overwrite haldispatch ptr, execute shellcode...
CVE-2026-8809
CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to 'acfpostid' Parameter This critical security vulnerability CVSS 9.8 affects all versions of the popular WordPress plugin Advanced Custom Fields: Extended ACF Extended from...
CVE-2026-80844
๐ฅ CVE-2026-80844 - DirtyAH6 Linux Kernel IPv6 AH6 Local Privilege Escalation CVE-2026-80844 is a Linux kernel vulnerability affecting the IPv6 Authentication Header AH6 / XFRM subsystem. The vulnerability is caused by insufficient validation of the IPv6 Routing Header segmentsleft field,...
CVE-2026-68121
โก CVE-2026-68121 - PPPoEject Linux Kernel PPPoE Use-After-Free โ Local Privilege Escalation A Linux kernel memory-corruption vulnerability in the PPPoE transmit path , caused by a stale pointer to an skbuff header after a device header callback reallocates the skb head. โ ๏ธ Disclaimer This...