rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

CopyFail

Local Privilege Escalation / Container Escape CVE-2026-31431 Usage: go build -ldflags="-s -w" -o CopyFail CVE-2026-31431.go ./CopyFail Affected Versions: Ubuntu 18.04, 20.04, 22.04, 24.04 Debian 11, 12, 13 RHEL 8, 9, 10 CentOS 8 Rocky Linux 8, 9, 10 AlmaLinux 8, 9, 10 Fedora 33-42 Alibaba Cloud...

CVE-2013-2094

CVE-2013-2094 Linux 2.6.32/2.6.37 - 3.8.10 PERFEVENTS local root x86/x8664 without backconnect...

PrintNotifyPotato

PrintNotifyPotato PrintNotifyPotato Another potato, using PrintNotify COM service for lifting rights For Windows 10 - 11 Windows Server 2012 - 2022 Usege C:\Windows\Temp PrintNotifyPotato.exe aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaaaaaa aaaaaaa aa...

SysmonEoP

SysmonEoP Proof of Concept for arbitrary file delete/write in Sysmon CVE-2022-41120/CVE-2022-44704 Vulnerability Vulnerability is in code responsible for ClipboardChange event that can be reached through RPC. Local users can send data to RPC server which will then be written in C:\Sysmon director...

CVE-2026-31635

CVE-2026-31635 Exploit for DirtyDecrypt - CVE-2026-31635 Local Privilege Escalation...

CVE-2026-97578

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local user could exploit this vulnerability by submitting a specially crafted video stream with invalid tile parameters. This flaw can trigger a division-by-zero error or an out-of-bounds write to memory,...

CVE-2026-97577

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local attacker can exploit this vulnerability by submitting a specially crafted AV1 video frame that specifies more tiles than provided by userspace or supported by hardware limits. This lack of bounds...

CVE-2026-31431

CVE-2026-31431 Copy Fail Local Privilege Escalation Copy Fail is a new Linux kernel zero-day that allows any authenticated user to gain root privileges Local Privilege Escalation, or LPE on almost every Linux distribution since 2017. An easy-to-use exploit is already public. Vulnerable list of...

CVE-2025-29338

CVE-2025-29338 — Security Advisory Buffer Overflow in NXP moal.ko Wi-Fi Kernel Driver woalsetupmoduleparam / parsecfggetline Field| Value ---|--- CVE ID| CVE-2025-29338 Severity| High CVSS v3.1 Score| 7.8 CVSS v3.1 Vector| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Vulnerability Type| Stack-Bas...

CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC

Symantec Encryption Desktop PGPwded.sys local privilege escalation PoC This repository contains a proof-of-concept for a local privilege escalation path in Symantec Encryption Desktop's PGPwded.sys storage filter, based on a low-privileged raw disk read/write primitive. The PoC was developed and...

CVE-2026-43494

🛠️ PinTheft — CVE-2026-43494 Local Privilege Escalation in Linux Kernel via RDS + iouring Page Cache Overwrite 📌 Overview PinTheft is a sophisticated local root exploit for CVE-2026-43494 , a reference-counting bug in the Linux kernel's Reliable Datagram Sockets RDS subsystem. By combining a...

CVE-2026-97575

A flaw was found in the Linux kernel's Video4Linux2 V4L2 subsystem. The stateless AV1 video decoding interface fails to properly validate tile dimensions in frame control requests. A local attacker can exploit this vulnerability by submitting a specially crafted frame configuration with excessive...

CVE-2021-4034

CVE-2021- A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling...

CVE-2017-5638

CVE-2017-5638...

CVE-2026-38053---Remove-PPL

CVE-2026-38053---Remove-PPL BYOVD Remove PPL for 24H2 and 25H2 An arbitrary memory write in the handler for IOCTL 0x12C807 METHODNEITHER of Wise System Monitor v1.5.3.127 allows attackers to cause a remove PPL or Denial of Service DoS via a crafted input. Additional Information Tested on: Windows...

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

copy-fail-checker

Copy Fail Checker — CVE-2026-31431 依存関係が少なく軽量な Bash スクリプトで、Linux システムが Copy Fail ローカル権限昇格脆弱性（CVE-2026-31431）にさらされているかどうかを確認します。 このスクリプトは 読み取り専用 です。脆弱性を悪用することはなく、カーネルモジュールをロードすることも、システムを変更することもありません。 Copy Fail とは Copy Fail は、Linux カーネルの authencesn AEAD 暗号テンプレートにおける論理バグであり、ユーザー空間から...

cve-2024-55591-poc

CVE-2024-55591 - Fortinet FortiOS 身份验证绕过 一个用 Go 编写的教育性实现，用于演示 CVE-2024-55591 的技术机制，这是一个影响 Fortinet FortiOS 的身份验证绕过漏洞。本仓库严格用于安全研究、防御分析和授权渗透测试。 工作原理 该工具围绕两个主要阶段（目标验证与利用）构建，与漏洞工作流程相对应： 阶段 1：目标验证与检测 1. 管理接口探测： 向 /login?redir=/ng 发送 HTTP/HTTPS GET 请求，并检查响应体中是否存在 FortiOS...

CVE-2025-47810

PunkBuster LPI CVE-2025-47810 Background PunkBuster installs itself as two services, and an optional? kernel driver. PnkBstrA: Service that runs constantly in the background, and in charge of managing PunkBuster as a whole PnkBstrB: Service that starts when a protected game starts. Comes with mor...