250017 matches found
CVE-2026-24291
CVE-2026-24291 Obfuscated version of RegPwn https://www.mdsec.co.uk/2026/03/rip-regpwn/ Added extra functionality that it wiill automatically create a local administrator with generated credentials. You can re-compile the payload with code execution as administrator as desired. Steps - Compile th...
cve-2026-31431
CVE-2026-31431 Copy Fail Detection and Mitigation Tool This project provides a set of Bash scripts for detecting and mitigating CVE-2026-31431 also known as "Copy Fail", a Linux kernel local privilege escalation vulnerability. Vulnerability Overview CVE ID : CVE-2026-31431 Vulnerability Type :...
CVE-2025-27591
CVE-2025-27591 - Privilege Escalation via Insecure Log Handling Overview CVE-2025-27591 is a local privilege escalation vulnerability in the below utility versions prior to the patched release caused by insecure symbolic link handling within its logging mechanism. Attackers with local access can...
pkwner
root@kitploit: āāāāāāā āāā āāāāāā āāāāāāā āāāāāāāāāāāāāāāāāā āāāāāāāāāāā āāāāāāā āāāāāāāā āāāāāāāāāāāāāāāāāāā āāāāāāāāāāāāāāā āāā āā āāāāāāāāā āāāāāāāāā āāāāāāāā āāāāāāā āāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāāā āāā āāā āāāāāāāāāāāāāāāā āāāāāāāāāāāāāāāāā āāā āāā āāā āāā āāāāāāāā āāā...
RottenPotato
Este cĆ³digo ya no se mantiene - para una implementaciĆ³n mĆ”s reciente, consulte https://github.com/breenmachine/RottenPotatoNG RottenPotato Escalada de Privilegios Local desde Cuentas de Servicio de Windows a SYSTEM Para una visiĆ³n tĆ©cnica de este exploit, consulte nuestra publicaciĆ³n en el blog e...
CVE-2026-25548
CVE-2026-25548 ā Remote Code Execution in InvoicePlane 1.7.0 Vulnerability: Remote Code Execution via Local File Inclusion + Log Poisoning Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Critical CVSS 3.1 Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CW...
CVE-2025-32463
CVE-2025-32463 ā Sudo EoP Exploit PoC with precompiled library This repository contains a proof-of-concept PoC exploit for CVE-2025-32463 , a local privilege escalation vulnerability in sudo discovered by Rich Mirch. Credit https://github.com/kh4sh3i/CVE-2025-32463 ā ļø Disclaimer This PoC is for...
CVE-2026-28372-GNU-inetutils-telnetd-Privilege-Escalation-main
CVE-2026-28372 ā GNU inetutils telnetd Privilege Escalation PoC š¤ Author Mohammed Idrees Banyamer Jordan šÆš“ Instagram: @banyamersecurity Security Researcher | Offensive Security | Exploit Development š§Ø Exploit Title CVEā2026ā28372 ā GNU inetutils telnetd Privilege Escalation via...
copy-fail-CVE-2026-31431-IOC
copyfail-detect Detection toolkit for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation technique that corrupts page-cache data without changing the file on disk. Why This Exists Copy Fail can bypass traditional file integrity monitoring because the on-disk file is not modifie...
pwnkit-go
Pwnkit-go This is a working exploit for the pwnkit vulnerability, CVE-2021-4034, written in Go Give it a try: root@kitploit: create a vulnerable vagrant machine $ make vm ... build the binary and scp it to the vagrant box $ make scp ssh onto the vagrant box $ make ssh The default user is "vagrant...
-CVE-2021-4034
-CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt " "Polkit formerly PolicyKit is a component for controlling system-wide privileges in Unix-like operating systems. It provides an organized way for non-privileged processes to communicate with privileged ones. ... It is als...
CVE-2021-4034
Python3 code to exploit CVE-2021-4034 PWNKIT. This was an exercise in "can I make this work in Python?", and not meant as a robust exploit. It Works For Me, there are problaby bugs. The default payload starts a shell as root, generated from msfvenom: root@kitploit: msfvenom -p linux/x64/exec -f...
CVE-2026-31431-Linux-Copy-Fail
CVE-2026-31431 - Linux Copy-Fail Exploit Rust A Rust implementation of a local privilege escalation exploit for CVE-2026-31431 Copy-Fail. It allows executing customized shellcode such as Meterpreter Introduction Xint disclosed CVE-2026-31431, an arbitrary page cache write vulnerability that chain...
CVE-2025-32463
CVE-2025-32463 šØ Privilege escalation to root usingsudo chroot. No need for gcc installed. š What is CVE-2025-32463? CVE-2025-32463 is a Linux vulnerability that allows a local attacker to escalate privileges to root by abusing the sudo chroot command. Unlike similar exploits, this technique does...
-Grafana-LFI-CVE-2021-43798
š Grafana LFI Exploit CVE-2021-43798 Automation script in Python 3 to exploit the Local File Inclusion LFI vulnerability in Grafana versions 8.0.0 to 8.3.0. This exploit allows directory traversal to read sensitive operating system files without authentication. āØ Features Python 3.10+ compatibili...
OverlayFS-LPE-Exploit
OverlayFS-LPE-Exploit OverlayFS Local Privilege Escalation CVE-2021-3493 Project Overview This repository contains documentation and exploit code for a Local Privilege Escalation LPE vulnerability found in the Ubuntu Linux kernel. This was tested in a TryHackMe lab environment. Lab Highlights...
CVE-2026-61741
The http4s-scala-xml library is vulnerable to XML External Entity (XXE) attacks in versions prior to 0.24.1 and 1.0.0-M39 . The root cause is the use of SAXParserFactory.newInstance to obtain a javax.xml.parsers.SAXParserFactory without any security configuration, allowing the parser to resolve D...
CVE-2026-61741 http4s-scala-xml has an XML External Entity (XXE) processing issue
http4s-scala-xml provides EntityDecoderF, scala.xml.Elem instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these decoders used a javax.xml.parsers.SAXParserFactory obtained from SAXParserFactory.newInstance without any security configuration. With the JDK's default...
EUVD-2026-86322
ZITADEL is an open source identity management platform. From 3.0.0 until 3.4.13 and 4.16.1, ZITADEL Actions V1 enables the goja Node-compatible require registry without restricting its filesystem source loader. An organization Action author with ORGOWNER, org.action.write, and org.flow.write...
CVE-2026-93803
In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: fix key index receive bound checks libipwrx reads skb-datahdrlen + 3 to extract the WEP key index in both the software-decrypt key selection path and the hardware-decrypted IV/ICV strip path. In both places the...