CVE-2020-1034

CVE-2020-1034 Warning This repository contains a working exploit. Publication was made for educational purposes only. Owner of this repository is not responsible for any damage done by any part of source code published here. This repository was created as a homework for "Protected Information...

CVE-2026-70178

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...

CVE-2026-70352

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-65818

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

CVE-2026-70178 Microsoft Fabric Elevation of Privilege Vulnerability

...

POC-Bash-CVE-2021-3560

Bash-CVE-2021-3560 POC Bash -- CVE-2021-3560 استغلال تصعيد الامتيازات المحلية في Polkit يوفر هذا المستودع استغلال بلغة باش لـ CVE-2021-3560، وهي ثغرة تصعيد امتيازات محلية في polkit تؤثر على العديد من توزيعات لينكس الحديثة. !!!!!! قيد الاختبار وقد يسبب عدم استقرار !!!!! 💥 ملخص الثغرة اكتشفها Kevin...

GTFOBLookup

GTFOBLookup Offline command line lookup utility for GTFOBins, LOLBAS, WADComs, and HijackLibs. Files .gitignore : Gitignore file gtfoblookup.1 : Linux man page for GTFOBLookup gtfoblookup.py : GTFOBLookup utility LICENSE.md : License file README.md : This file requirements.txt : List of required...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

CVE-2026-0163-EXP

CVE-2026-0163 DISCLAIMER This repository is for educational and research purposes only. The author is not responsible for any misuse, damage, or illegal activities caused by the use of this material. Use at your own risk. Respect applicable laws and ethical guidelines. Overview A functional remot...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Microsoft SharePoint Server Authentication Bypass Exploit Critical CVSS 9.8 — Unauthenticated Privilege Escalation to Farm Administrator in Microsoft SharePoint Server Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure...

CVE-2026-31431

CVE-2026-31431 "فشل النسخ" عدة أدوات المؤلف: byt3l0rd كاشف وإثبات مفهوم لتصعيد الامتيازات المحلية LPE لثغرة الكتابة الخادشة في ذاكرة التخزين المؤقت للصفحات في Linux algifaead / authencesn التي تم الكشف عنها في 2026-04-29. التقرير التقني للكشف: https://xint.io/blog/copy-fail-linux-distributions...

Quiksand-CVE-2023-24012

DDS Security Test ROS 2 DDS security research test environment, based on ROS 2 Foxy. Project Introduction This project demonstrates a privilege escalation vulnerability in the ROS 2 SROS2 security framework. By modifying signed permission files, an attacker can cause a node to subscribe to topics...

NPM: ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree

NPM: ApostropheCMS: Missing destination-parent authorization in page move allows a low-privileged editor to move and re-rank pages inside a restricted subtree vulnerability discovered by ? in WordPress Npm apostrophe versions = 4.31.0...

EUVD-2026-60438

ApostropheCMS: Missing destination-parent authorization in page move allows a low-privileged editor to move and re-rank pages inside a restricted subtree...

json-interop-vuln-labs

JSON Interoperability Vulnerability Labs Description These are the companion labs to my research article "An Exploration of JSON Interoperability Vulnerabilities". Lab 1: Free purchases in an E-commerce Application Key Collision Attacks: Inconsistent Duplicate Key Precedence Inconsistent Large...

CVE-2023-20938-poc

CVE-2023-20938 — Android binder UAF privilege escalation A local privilege escalation proof-of-concept for CVE-2023-20938 , a use-after-free in the Android binder driver. From an unprivileged shell it gains uid 0 and drops SELinux to permissive , then spawns a root shell. Target for this build:...

CVE-2026-7867-disk2root

Filesystem.Mount → as-user Spoofing → Authorization Bypass → Root-context Mount → LPE Overview CVE-2026-7867 is a local privilege escalation vulnerability in udisks2 involving the Filesystem.Mount D-Bus method, the as-user option, fstab-managed mount flows...

CVE-2026-31431

Description: Cfail is my implementation in C++ x86-64 Assembly of CVE-2026-31431 aka Copyfail, with no dependecy required at all, included libc. In fact, you obtain am universal executable able to run stand-alone on every Linux x86-64 distribution, thanks to a minimal implementation of the standa...

KSuRoot

KSuRoot A one-click KernelSU privilege escalation tool based on the CVE-2026-43499 GhostLock kernel vulnerability. This branch is based on KSURoot, fully syncing the Root-My-Galaxy v0.2.6 mainline updates, and adds a custom dynamic library import feature. Mod by hmascs · Version 2.2.0 versionCode...

CVE-2023-33730

CVE-2023-33730 — تصعيد الصلاحيات في وحدة تحكم إدارة eScan الخطورة: حرجة معرّف CVE: CVE-2023-33730 تاريخ الإفصاح: 30 مايو 2023 الباحث: Sahil Ojha جدول المحتويات نظرة عامة تفاصيل الثغرة الأثر التحليل الفني إثبات المفهوم المعالجة المراجع إخلاء المسؤولية نظرة عامة وحدة تحكم إدارة eScan هي حل مركزي...