CVE-2024-45264

CVE-2024-45264 Description suggérée Une vulnérabilité de falsification de requête intersite CSRF dans le panneau d'administration de SkySystem Arfa-CMS avant la version 5.1.3132 permet à des attaquants distants d'ajouter un nouvel administrateur, entraînant une élévation de privilèges. Type de...

CVE-2022-35899

CVE-2022-35899 未引用的服务路径 ASUS GameSDK 漏洞标题：ASUS GameSDK v1.0.0.4 - 'GameSDK.exe' 未引用服务路径（权限提升） 日期：2022年7月14日 漏洞作者：Angelo Pio Amirante 版本：1.0.0.4 测试环境：Windows 10 修复版本：1.0.5.0 发现未引用服务路径的步骤 root@kitploit: wmic service get name,displayname,pathname,startmode | findstr /i "auto" | findstr /i /v...

CVE-2019-16098

CVE-2019-16098 यह CVE RTCore64.sys ड्राइवर का शोषण करता है और सिस्टम प्रक्रिया के टोकन को कम-विशेषाधिकार वाली cmd.exe प्रक्रिया में कॉपी करके सिस्टम विशेषाधिकारों के साथ एक cmd.exe प्रक्रिया बनाता है। दृष्टिकोण और कार्यप्रणाली के बारे में ब्लॉग यहाँ पाया जा सकता है।...

CVE-2025-27591

CVE-2025-27591 परिचय below के v0.9.0 संस्करण एक स्थानीय विशेषाधिकार वृद्धि भेद्यता के प्रति संवेदनशील हैं, क्योंकि प्रोग्राम एक विश्व-लेखनीय लॉग फ़ाइल बनाता है, और इसके बजाय एक विश्व-लेखनीय लॉग फ़ाइल; हमलावर लॉग फ़ाइल को किसी भी सिस्टम-क्रिटिकल फ़ाइल के सिम्लिंक से बदल सकता है और उसे संपादित करके...

Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074

Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074...

CVE-2024-45265

CVE-2024-45265 Vorgeschlagene Beschreibung Eine SQL-Injection-Schwachstelle in der Poll-Komponente von SkySystem Arfa-CMS vor Version 5.1.3132 ermöglicht es entfernten Angreifern, beliebige SQL-Befehle über den Parameter psid auszuführen. Schwachstellentyp CWE-89 | SQL Injection Hersteller des...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Nicht authentifizierte Privilegieneskalation durch Rolleninjektion 🔥 Zusammenfassung der Schwachstelle Das WordPress-Plugin Doctreat Core in den Versionen = 1.6.8 ist anfällig für eine nicht authentifizierte Privilegieneskalation. Dieser kritische Fehler...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 – Nicht authentifizierte Privilegienausweitung 🧨 CVE-2025-39459 – Real Estate 7 = 3.5.2 Nicht authentifizierte Privilegienausweitung 📌 Überblick Dieses Repository enthält ein Python-Proof-of-Concept-Tool für CVE-2025-39459 , das das Real Estate 7 WordPress-The...

CVE-2025-29556

CVE-2025-29556 – ExaGrid 보안 책임자 계정 생성 우회 📝 개요 취약점 제목 : 보안 책임자 계정의 무단 생성 제품 : ExaGrid EX10 백업 어플라이언스 영향받는 버전 : 공개 시점의 현재 버전에서 테스트됨 영향받는 버전 : 6.3 – 7.0.1.P08 CVE ID : CVE-2025-29556 심각도 : 높음 공격 경로 : 인증된, 낮은 권한의 접근 영향 : 보안 책임자 역할로의 권한 상승 🧨 설명 이 개념 증명PoC은 ExaGrid API에서 낮은 권한 또는 탈취된 세션이 적절한 검증이나 인가 없이...

exploit_CVE-2021-3560

Script de Exploração CVE-2021-3560 Este script explora a CVE-2021-3560, uma vulnerabilidade no polkit que permite escalonamento de privilégios para root. Uso Após clonar o repositório, conceda permissões de execução e execute o script: root@kitploit: chmod +x exploit.sh ./exploit.sh Resultado...

unisoc-su

unisoc-su Un metodo per CVE-2025-31710 e per connettersi al socket astratto cmdskt per ottenere una shell root su modelli unisoc non patchati Prima che tutti urlino, Unisoc stesso mi ha autorizzato a pubblicarlo dopo il bollettino CVE-2025-31710, quindi state tranquilli. Iniziamo con una battuta...

Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis

1. Native API & APC-Injektion Der x64dbg-Speicherabbild zeigt, dass Agent Tesla Native-API-Aufrufe NT API für Low-Level-Operationen verwendet, einschließlich der APC-Injektion Asynchronous Procedure Call. Beobachtete Schlüsselfunktionen: NtQueueApcThread – Injiziert Code über APC in einen...

CVE-2025-15260

CVE-2025-15260: Autorizzazione Mancante / Controllo di Accesso Interrotto nel Plugin - MyRewards – Loyalty Points and Rewards for WooCommerce Disclaimer: Questo repository è creato solo per scopi educativi e divulgazione etica. La vulnerabilità è stata segnalata responsabilmente al fornitore e...

profilehound

root@kitploit: / \ / / / / / / / / / // / / / // / / / // / / / / / / / / / / / // / / / / / / // / // / / / / // / // // // ///// ///,// //,/ ProfileHound ProfileHound è uno strumento post-elevazione progettato per aiutare a individuare e raggiungere obiettivi di red-teaming, localizzando...

CVE-2026-65956 KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without...

CVE-2026-65956 KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without...

CVE-2026-65956

KubePi (a Kubernetes multi-cluster management panel) versions up to 1.6.15 expose SSO, OIDC, and SAML configuration API endpoints on the same public routing boundary as login and callback endpoints, requiring no administrator authorization. An unauthorized or low-privileged user can read, create,...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 è un overflow di heap nel buffer di glibc vsysloginternal sfruttato tramite la Convergent Time Theory α = 0.0302011. Uno spray heap temporale a 33 strati con trigger bloccato in fase per un affidabile escalation dei privilegi locali. README.md...

CVE-2026-46215-POC

CVE-2026-46215: DRM GEM changehandle Use-After-Free unprivileged LPE Lokale Privilegienerweiterung durch einen Use-After-Free im DRM-Core-IOCTL DRMIOCTLGEMCHANGEHANDLE drmgemchangehandleioctl, ioctl-Nr. 0xD2. Erreichbar für jeden Benutzer mit Zugriff auf einen Render-Node /dev/dri/renderD, gewähr...

CVE-2026-43499-OnePlus15

CVE-2026-43499 — OnePlus 15 LPE PoC Educativo ATTENZIONE: Questo repository è fornito solo a scopo educativo e di ricerca. Non vengono distribuiti binari precompilati o release. Devi compilare tutto dal sorgente. Escalation dei privilegi locali su Android 16 per OnePlus 15. Fork di...