RootRemover

!WARNING Úsalo solo en sistemas que poseas o tengas autorización para probar. RootRemover CVE-2026-31431 Elimina temporalmente la contraseña de root, utiliza CVE-2026-31431 para permitir una escalada a root independiente de la arquitectura sin conocer la contraseña del usuario actual. Úsalo con...

CVE-2020-25223

CVE-2020-25223 Un script PoC para probar CVE-2020-25223 contra una Sophos UTM afectada. Dada una dirección IP, el script intenta descargar una copia del archivo /etc/shadow del dispositivo. Investigación original: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

CVE-2021-41773-PoC

CVE-2021-41773 Vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server 2.4.49 Este script prueba Apache HTTP Server 2.4.49 Uso: CVE-2021-41773.py opciones Solo para una IP: python CVE-2021-41773.py IPaddress Opción -f Para lista de IPs en un archivo Ejemplo: python...

CVE-2020-13886

PoC: https://youtu.be/nNKBRx8IglI root@kitploit: ------------------------------------------------------------------------------------------------------------- ------------- 0day: TELÉFONO IP TIP200/200 LITE & TIP 300 | Local File Include | ----------------------------...

dirty-pipe-poc

POC Exploit to add user to Sudo for CVE-2022-0847 Dirty Pipe Vulnerability This repo is based of the Vulnerability, Writeup and Exploit produced by Max Kellermann all found here. Just like everyone I had to take advantage of playing with the worlds most trivial to repro Priv Esc the blog post doe...

cve-2021-41773-and-cve-2021-42013

cve-2021-41773 y cve-2021-42013 Script de verificación por lotes en Python para cve-2021-41773 y cve-2021-42013 Entorno de ejecución: python3 Uso: python3 poc.py url.txt url.txt contiene las URLs a verificar; las URLs con vulnerabilidad se escribirán en success.txt El contenido de verificación es...

CiscoRV320Dump

CiscoRV320Dump Exploits CVE-2019-1653/CVE-2019-1652 para volcar configuraciones de Cisco RV320 y obtener RCE Implementaciones de los exploits CVE-2019-1652 y CVE-2019-1653 divulgados por Red Team Pentesting GmbH. Solo probé estos en un RV320, pero según el aviso de Cisco, el RV325 también es...

CVE-2025-27591

CVE-2025-27591 - Escalada de privilegios a través de below Este repositorio contiene un exploit para CVE-2025-27591 , una vulnerabilidad de escalada de privilegios en la herramienta de monitoreo de Linux Below. 🛠️ Detalles de la vulnerabilidad CVE : CVE-2025-27591 Puntuación CVSS : 7.8 Alta...

CVE-2022-0847-DirtyPipe-Exploit

¿Qué es esto? Esta es la prueba de concepto de Max Kellermann para Dirty Pipe, pero modificada para sobrescribir el campo de contraseña de root en /etc/passwd y restaurarlo después de obtener un shell de root. Nota al margen: No reclamo ningún crédito por encontrar esta vulnerabilidad o escribir ...

CVE-2025-27519

Exploit de escalada de privilegios Below CVE-2025-27519 Este repositorio contiene un script Bash de prueba de concepto PoC para explotar la vulnerabilidad de escalada de privilegios Below CVE-2025-27519 en sistemas Linux. El exploit permite a un usuario local escalar privilegios a root abusando d...

Below-Logger-Symlink-Attack_CVE-2025-27591

CVE-2025-27591 漏洞利用 - Below 日志符号链接攻击 基于 Bash 的权限提升漏洞利用，针对 below 系统性能监控工具。此改进版漏洞利用日志机制中的符号链接漏洞，向 /etc/passwd 注入 root 用户，实现完全 root 访问。 致谢 由 SUSE 的 Matthias Gerstner 发现并报告 - 安全公告 漏洞详情 CVE : CVE-2025-27591 影响组件 : /usr/bin/below（Facebook 的系统性能监控器） 影响版本 : 日志目录为世界可写的 below 版本 漏洞类型 : 符号链接攻击 / 权限提升 攻击向量 :...

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.45 packages and security update

Red Hat OpenShift Container Platform release 4.19.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.31 packages and security update

Red Hat OpenShift Container Platform release 4.21.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.36 packages and security update

Red Hat OpenShift Container Platform release 4.20.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

RHCOS 4 : OpenShift Container Platform 4.20.36 (RHSA-2026:60444)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60444 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...

RHCOS 4 : OpenShift Container Platform 4.21.31 (RHSA-2026:60449)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60449 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: targetcli (UTSA-2026-093622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093622 advisory. Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files. Tenable has extracted the preceding...