218008 matches found
RegistrationMagic <= 6.0.7.1 - Privilege Escalation
RegistrationMagic WordPress plugin = 6.0.7.1 contains a privilege escalation caused by improper access control in 'addmenu' via 'rmuserexists' AJAX action, letting unauthenticated attackers manipulate admin menu capabilities, exploit requires subscriber user for further escalation. id:...
Joplin 3.3.3 Server - Privilege Escalation
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, a privilege escalation vulnerability exists in the Joplin server, allowing non-admin users to exploit the API endpoint PATCH /api/users/-id t...
Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation
The Simple User Registration plugin ≤ 6.3 is vulnerable to privilege escalation. It lacks proper restrictions on user meta values during registration. Unauthenticated attackers can exploit this to register as administrators. id: CVE-2025-4334 info: name: Simple User Registration = 6.3 -...
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...
Windmill < 1.603.3 - Operator Authorization Bypass
Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...
Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it...
MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation of the Apple login feature. This allows unauthenticated attackers to log in as any user as long as they know the user's...
HyperComments <= 1.2.2 - Arbitrary Options Update
The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to...
Cobbler - Authentication Bypass
Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ and possibly even older versions, may be vulnerable to an authentication bypass vulnerability in XMLRPC API /cobblerapi that can result in privilege escalation, data manipulation or exfiltration, and LDAP credential harvesting...
Vulnerable-Docker-Engine
CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...
Gin-Vue-admin-poc-CVE-2022-21660
Gin-Vue-admin Vertical Privilege Escalation Vulnerability and Code Analysis - CVE-2022-21660 1. Foreword Welcome everyone to give this project a star.http https://github.com/flipped-aurora/gin-vue-admin/ root@kitploit: After finishing the article, applying for a CVE was somewhat troublesome, but...
CVE-2016-0728
CVE-2016-0728 Seccamp 2017 Assignment The following program exploits a vulnerability present in the Linux kernel versions 3.8 to 4.4. Explain the malfunction that occurs when this program is executed. Also, write an exploit that achieves root privilege escalation by further exploiting this...
CVE-2023-0386
README root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Analyse de la vulnérabilité Les connaissances théoriques de cet article espaces de noms, système de fichiers overlay, système de fichiers FUSE, etc. proviennent toutes de ChatGPT. Présentation de la...
Ubuntu-LPE
This repository does not have a README...
WindowsElevation
이게 무엇인가요? 이 프로젝트는 주로 Windows 플랫폼에서 흔히 사용되는 exp를 수집하고 관련 복구 방안을 제공하기 위해 만들어졌습니다. 한편으로는 보안 연구원이 침투 테스트 과정에서 권한 상승을 신속하게 완료하는 데 도움이 되며, 다른 한편으로는 프로젝트 측이 목록에 따라 아직 적용되지 않은 취약점 패치를 찾아 시스템 보안을 강화하는 데에도 도움이 됩니다. 정보 CVE ID| MS ID| KB| 운영 체제 ---|---|---|--- CVE-2003-0352| MS03-026| KB823980| Windows...
CVE-2026-0092
CVE-2026-0092 In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. NVD - CVE-2026-0092 Android...
CVE-2023-4911-Lab
Entorno de análisis de CVE-2023-4911 "Looney Tunables" Entorno de prácticas basado en Docker para el análisis de la vulnerabilidad de desbordamiento de búfer Local Privilege Escalation en el cargador dinámico de GNU C Library glibc y el desarrollo de exploits. Información de CVE Elemento| Conteni...
0xsp-Mongoose
Apoya el proyecto para el desarrollo continuo ETH 0xf340c15c5e669a4ababab856e9f2bccd659d6e42 0xsp Mongoose RED para Windows Versión actual 2.2.0 La versión roja de 0xsp mongoose se proporciona para ayudar a sus necesidades durante la simulación de ciberseguridad; al usar esta versión, podrá audit...
