219749 matches found
CVE-2021-41805
CVE-2021-41805 Hashicorp Consul RCE via API HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token with the default operator:write permissions in one namespace can be used for unintended privilege escalation in a differe...
CVE-2023-3460
Ultimate Member - Overview Welcome to the Ultimate Member GitHub repository! Ultimate Member is a powerful and flexible user profile and membership plugin for WordPress but Sometimes Plugins has some vulnerability and lead to website compromisation Important Notice: Please note that the version o...
exploit-CVE-2021-3560
Exploit for CVE-2021-3560 Polkit - Local Privilege Escalation Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description It was found that polkit could be tricked into bypassing the...
physmem
physmem physmem es una herramienta de inspección de memoria física y de escalada de privilegios local dirigida a macOS hasta 10.12.1 inclusive. Explota CVE-2016-1825 o CVE-2016-7617 según el objetivo de despliegue. Estas dos vulnerabilidades son casi idénticas y su explotación se puede realizar...
SneakyEXE
SneakyEXE root@kitploit: /$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$$$$$$$ /$$ $$ | $$ | $$/| $$ / $$| $$/ | $$ / /$$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$ /$$ /$$| $$ | $$/ $$/| $$ | $$$$$$ | $$ $$ /$$ $$ | $$| $$ /$$/| $$ | $$| $$$$$ \ $$$$/ | $$$$$ \ $$| $$ \ $$| $$$$$$$$ /$$$$$$$| $$$$$$/ | $$ | $$| $$/ $$ $$ ...
CVE-2026-51119
CVE-2026-51119 - Privilege Escalation in Invixium IXM WEB v2.3.85.25 Overview A privilege escalation vulnerability exists in Invixium IXM WEB v2.3.85.25 due to missing authorization checks on the POST /SystemUsers/CreateAppUser endpoint. An authenticated low-privileged user can abuse this endpoin...
cve-2016-6662
About Some help to explot CVE-2016-6662 Warnings Make sure to change the attacker IP in the c file before compiling Credit All credit to original discoverer. Writeups here: http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html Discussion here:...
CVE-2019-13272
CVE-2019-13272 The exploit for CVE-2019-13272 Vulnerability Type: Linux Local Privilege Escalation Vulnerability Scope: Linux kernel versions below 5.1.17 Local test environment: Vulnerability related information: https://bugs.chromium.org/p/project-zero/issues/detail?id=1903...
CVE-2025-12539
CVE-2025-12539 TNC Toolbox: Web Performance = 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover 🚨 TNC Toolbox: Web Performance = 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover 🛡️ Descriptio...
CVE-2026-47102-PoC
CVE-2026-47102 — LiteLLM Privilege Escalation via /user/update LiteLLM v1.83.7 versions before v1.83.10 /user/update endpoint allows low-privileged users with access to this endpoint to modify their own userrole field to proxyadmin when updating their account, achieving unauthorized privilege...
CVE-2024-27631
CVE-2024-27631 Vulnerability Details Overview In Savane v3.12 and prior, a lack of CSRF protection on administrative functions can allow for privilege escalation and/or account takeover. In particular, the endpoint /siteadmin/usergroup.php includes the functionality to change the passwords and...
cve-2026-46331-audit
cve-2026-46331-audit Script de auditoría de solo lectura para CVE-2026-46331 también conocido como pedit COW — un error parcial de copia en escritura en la acción actpedit del subsistema net/sched del kernel de Linux que permite a un usuario local no privilegiado corromper la memoria caché de...
CVE-2024-30896
CVE-2024-30896 Resumen Una falla de lógica de negocio en influxdb permite a los usuarios que poseen un token allAccess válido escalar sus privilegios al nivel de operador al listar los tokens de autorización actuales. Escenario El atacante podría ser un usuario al que un administrador le otorgó...
Forklift_LPE
Escalada de Privilegios Local en Forklift 3.3.9 Al instalar Forklift, un nuevo helper llamado com.binarynights.ForkLiftHelper para Mac OS X se instala automáticamente en el directorio /Library/PrivilegedHelperTools/. El análisis de este helper, que maneja mensajes XPC, dio como resultado diferent...
CVE-2025-2502
Discovered by chance while learning about local privilege escalation. In any version of Lenovo PC Manager, the tools in Lenovo PC Manager have permission flaws. Any downloaded tool grants ordinary users F full control permissions. Since tools in all versions have permission issues, ordinary users...
root-my-webos-tv
Root my webOS TV A simple python script that starts a telnet server on vulnerable webOS devices as root. Verified TVs webOS 4.9.7 - 5.30.40 model LG43UM7000PLA webOS 5.5.0 - 04.50.51 model OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 model OLED48C1PUB webOS 7.3.1-43 mullet-mebin -...
CVE-2023-36802-MSKSSRV-LPE
CVE-2023-36802 MSKSSRV.sys Local Privilege Escalation PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy which suffers from a type confusion vulnerability. This proof-of-concept is modeled after the write-up done by Benoît Sevens @benoitsevens. The article can be found here:...
CVE-2024-21626-runcPOC
【漏洞复现】CVE-2024-21626 docker runc逃逸漏洞 1、漏洞简介 漏洞名称| docker runc逃逸漏洞 ---|--- 漏洞编号| CVE-2024-21626 披露日期| 2024-01-31 特征| / 影响版本| runc @ v1.0.0-rc93,1.1.11 2、漏洞利用&POC/EXP 利用条件 有点苛刻，需要受害者交互，个人认为有点鸡肋： 1. 使用攻击者的恶意镜像（包括一些对工作目录的设置等）创建容器 2. 攻击者可以控制容器，执行命令。 漏洞存在验证与获取描述符： root@kitploit: git clone...
Dirty-Pipe-CVE-2022-0847-POCs
Dirty-Pipe-CVE-2022-0847-POCs Autor: Max Kellermann [email protected] Colaborador: Bl4sty https://twitter.com/bl4sty Una nueva vulnerabilidad de Linux conocida como 'Dirty Pipe' permite a los usuarios locales obtener privilegios de root a través de exploits disponibles públicamente. Hoy, el...