gpoParser

gpoParser gpoParser एक उपकरण है जिसे Active Directory वातावरण में Group Policy Objects GPOs के माध्यम से लागू किए गए कॉन्फ़िगरेशन को निकालने और उनका विश्लेषण करने के लिए डिज़ाइन किया गया है। चूँकि इन सेटिंग्स की सूची बनाना थकाऊ और समय लेने वाला हो सकता है, यह उपकरण लागू नीतियों की स्पष्ट समझ प्रद...

PrintNotifyPotato

PrintNotifyPotato PrintNotifyPotato Eine weitere Potato, die den PrintNotify-COM-Dienst zum Anheben von Rechten nutzt Für Windows 10 - 11 und Windows Server 2012 - 2022 Verwendung root@kitploit: C:\Windows\Temp PrintNotifyPotato.exe aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa...

ACEshark

ACEshark Was ist das? ACEshark ist ein Dienstprogramm zur schnellen Extraktion und Analyse von Windows-Dienstkonfigurationen und Access Control Entries, ohne dass Tools wie accesschk.exe oder andere nicht native Binärdateien benötigt werden. Warum? Dienstberechtigungen effizient identifizieren un...

NotCVE-2026-0010

Zusammenfassung Schwachstelle: Nicht authentifizierte lokale IPC-Privilegienerweiterung auf SYSTEM über den Barrier-Daemon-TCP-Port 24801 Anbieter: debauchee Barrier-Projekt Produkt: Barrier 2.4.0 finale Version, 2021-11-01 CWE: CWE-306: Fehlende Authentifizierung für kritische Funktion...

CVE-2024-1086

CVE-2024-1086 यूनिवर्सल लोकल प्रिविलेज एस्केलेशन Proof-of-Concept एक्सप्लॉइट CVE-2024-1086 के लिए, जो v5.14 और v6.6 के बीच के अधिकांश Linux कर्नेल पर काम करता है, जिसमें Debian, Ubuntu और KernelCTF शामिल हैं। KernelCTF इमेजेज में सफलता दर 99.4% है।...

ez-pwnkit

ez-pwnkit Un'implementazione in puro Go dell'exploit CVE-2021-4034 PwnKit. L'exploit utilizza syscall.ForkExec per sopravvivere alla fine del programma principale. Installazione root@kitploit: git clone https://github.com/OXDBXKXO/ez-pwnkit.git cd ez-pwnkit make Poiché l'exploit si basa su una...

CVE-2021-4034

CVE-2021-4034 PoC CVE 2021-4034 PwnKit: Vulnerabilità di Escalation dei Privilegi Locali Scoperta in pkexec di polkit PoC Verificato su Kali. root@kitploit: ┌──kali㉿kali-/Documents └─$ grep PRETTY /etc/os-release PRETTYNAME="Kali GNU/Linux Rolling" ──kali㉿kali-/Documents └─$ lsbrelease -a No LSB...

cve-2026-25676

Ricerca su CVE-2026-25676 DLL Search Path Hijacking nell'Installer di M-Track Duo HD Panoramica Questo repository contiene la ricerca iniziale e una proof-of-concept relativa a CVE-2026-25676, una vulnerabilità di DLL search path hijacking che colpisce l'installer di M-Track Duo HD 1.0.0...

ZenML ZenML Server - Improper Authentication

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. id: CVE-2024-25723 info:...

WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation

User Registration & Membership WordPress plugin = 5.1.2 contains an improper privilege management vulnerability caused by accepting user-supplied roles without server-side allowlist enforcement, letting unauthenticated attackers create administrator accounts id: CVE-2026-1492 info: name: WordPres...

VoipMonitor - Pre-Auth SQL Injection

A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level. id: CVE-2022-24260 info: name: VoipMonitor - Pre-Auth SQL Injection author: gy741 severity: critical description: A SQL injection vulnerability in Voipmonitor GUI...

User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation

The User Registration & Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 4.1.1. This is due to insufficient restrictions on role type in the 'preparemembersdata' function. This makes it possible for unauthenticated attackers to create newuser...

Intel Neural Compressor <2.5.0 - SQL Injection

Improper input validation in some IntelR Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access. id: CVE-2024-22476 info: name: Intel Neural Compressor 2.5.0 - SQL Injection author: ritikchaddha,daffainfo...

SimpleHelp <= 5.5.7 - Privilege Escalation

SimpleHelp remote support software v5.5.7 and before contains a privilege escalation caused by insufficient access controls in API key creation, letting low-privileges technicians escalate privileges to server admin, exploit requires low-privileges technician access. id: CVE-2024-57726 info: name...

Login as User or Customer < 3.3 - Privilege Escalation

The plugin lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session. id: CVE-2022-4305 info: name: Login as User or Customer 3.3 - Privilege Escalation author: r3Y3r53 severity: critical...

geojson2kml - Command Injection

Detects command injection vulnerability by checking if hacked.txt is created and contains the expected content. id: CVE-2020-28429 info: name: geojson2kml - Command Injection author: eeche,chae1xx1os,persona-twotwo,soonghee2 severity: critical description: | Detects command injection vulnerabilit...

Adobe Commerce/Magento - Customer Session Identity Switch

Adobe Commerce contains an incorrect authorization vulnerability caused by improper access control, letting attackers escalate privileges to access sensitive resources, exploit requires no user interaction. id: CVE-2026-71362 info: name: Adobe Commerce/Magento - Customer Session Identity Switch...

CVE-2021-3156

Baron Samedit - Sudo CVE 2021-3156 PoC Écrit en BASH et C. Écrit par : TheFlash2k/Ali Taqi Wajid Utilisation : root@kitploit: This would spawn a root shell directly if the sudo is vulnerable. $ make $ ./exploit...

CVE-2021-4034

CVE-2021-4034 PoC sporco per CVE-2021-4034 Pwnkit Crediti completi al Team Qualys https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034...

zerologon

Zerologon Zusammenfassung Ein Zeek-Erkennungspaket für CVE-2020-1472, auch bekannt als Zerologon, eine Schwachstelle mit CVSS 10.0 zur Rechteausweitung gegen das Netlogon-Protokoll für Windows-Server-Domänencontroller. Hinweise Standardmäßig werden beide Hinweise ausgelöst: ZerologonAttempt zeigt...