CVE-2023-20198

Overview This repository contains a cybersecurity case study analysing CVE-2023-20198, a critical zero-day vulnerability in Cisco IOS XE Software. The project explores how the vulnerability can be exploited via the Web UI and proposes technical, procedural, and policy-based mitigation strategies...

CVE-2025-4796

CVE-2025-4796 Eventin Once the email is changed to an attacker-controlled address, the standard WordPress password reset flow can be used to take over the account. 🧰 Script PoC Filename: CVE-2025-4796.py This script automates the steps: 1. Log in to the target WordPress site using supplied...

CVE-2023-32353-PoC

CVE-2023-32353 Prueba de Concepto Descargo de responsabilidad Este código de prueba de concepto se publica con fines educativos. Debería animar a otras personas a encontrar vulnerabilidades similares, reportarlas de manera responsable y corregirlas. El 23 de mayo de 2023, Apple publicó una...

CVE-2025-45467

CVE-2025-45467: Insecure Firmware Verification in Unitree Go1 Summary A critical vulnerability CVE-2025-45467 has been discovered in Unitree Go1 robotic dog all firmware versions ≤ Go120220511, where the firmware update mechanism relies solely on insecure MD5 hash checks for integrity verificatio...

Exploiting-Stagefright-Vulnerability-CVE-2015-3864

Exploiting-Stagefright-Vulnerability-CVE-2015-3864 Stagefright se refiere a un conjunto de fallos de software en las versiones de Android 2.2 "Froyo" hasta 5.1.1 "Lollipop", que afectaban al 95% de todos los teléfonos Android aún. Si la vulnerabilidad es explotada, un atacante puede usar ejecució...

CVE-2023-0861-POC

Analyzing and Reproducing the Command Injection Vulnerability CVE-2023-0861 in NetModule Routers NetModule is an Original Equipment Manufacturer OEM of industrial grade routers that are commonly used in critical infrastructure and industrial control systems. On February 24th, 2023, ONEKEY, a...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

cve-2026-6471-postgres-logical-decoding-dlopen

PostgreSQL CVE-2026-6471: logical decoding dlopen of an arbitrary library PostgreSQL logical decoding lets a non-superuser role that holds the REPLICATION privilege create a logical replication slot and choose the output plugin. On affected versions there is no authorization check on that choice,...

CVE-2020-1048

CVE-2020-1048 An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then...

perf-exploiter

perf-exploiter CVE-2014-2630 In one of our recent penetration tests we have abused a vulnerability affecting a suid binary called "xglance-bin". Part of HP Performance Monitoring solution , it allowed us to escalate our local unprivileged sessions on some Linux RHEL 7.x/8.x systems to root. To be...

cve-2014-7912

cve-2014-7911 Exp for cve-2014-7911 which can get system privillage, based on most of the codes of others but different gadget 1. install the apk and click the button 2. system server will restart 3. will write system id100 into /data/1.txt...

SOC335-CVE-2024-49138-Exploitation-Detected

Detección de Explotación de CVE-2024-49138 En este proyecto, investigué un incidente de seguridad simulado en la plataforma LetsDefend, donde una máquina Windows fue comprometida mediante la explotación de CVE-2024-49138—una vulnerabilidad de escalada de privilegios en el controlador del Sistema ...

Dirty-Pipe-Exploit

Dirty-Pipe-Exploit The Dirty Pipe exploit CVE-2022-0847 is a Linux kernel vulnerability v5.8+ allowing unprivileged attackers to overwrite arbitrary files via a flaw in the pipe mechanism. This leads to privilege escalation, granting root access. Similar to Dirty Cow but easier to exploit. Fix:...

CVE-2021-4034

CVE-2021-4034 pkexec El uso de este script en python aprovecha la vulnerabilidad en el archivo pkexec para ganar acceso a root sin proporcionar credenciales · Detecta si el binario tiene los privilegios SUID, en este caso es vulnerable root@kitploit: usuario@gatogamer $ ls -la /usr/bin/pkexec...

CVE-2020-28874

This repository contains the description of the vulnerability found CVE-2020-28874 in ProjectSend r1270 release. Thank you to my colleagues from Entelgy Innotec Security for pushing me to improve! CVE-2020-28874: Privilege Escalation Description The vulnerability is in the reset password componen...

cve-2014-4014-privesc

https://duasynt.com/blog/cve-2014-4014-local-privilege-escalation...

CVE-2026-68398

CVE-2026-68398: Ubuntu PPPoL2TP use-after-free to local root This repository contains a build-specific local privilege-escalation exploit for CVE-2026-68398 , a use-after-free race between PPPoL2TP receive processing and destruction of an unattached PPP channel. It was validated in QEMU against t...

CVE-2023-32233

Building And Configuring The instructions below were tested under Ubuntu 23.04 Lunar Lobster. Installing Build Dependencies Run the following command to install the build dependencies: root@kitploit: sudo apt install gcc libmnl-dev libnftnl-dev Building Binary Run the following command to build t...

CVE-2024-21107

CVE-2024-21107 Oracle VM VirtualBox para Windows anterior a 7.0.16 - Elevación de Privilegios Descripción: Se ha identificado una vulnerabilidad en Oracle VM VirtualBox en Windows donde el instalador no establece los permisos de acceso adecuados para su carpeta de instalación si se eligió una rut...

CVE-2019-9202

CVE-2019-9202 Exploit de ejecución remota de código en Nagios IM 2.6: CSRF + SQLi + RCE + LPE → root remoto Descripción Encadenando una falsificación de petición entre sitios CSRF / omisión de autorización CVE-2019-9203 es posible explotar una inyección SQL basada en UNION CVE-2019-9204, una...