CVE-2021-4034

CVE-2021-4034 Proof of Concept Исследователи Qualys обнаружили довольно интересную локальную уязвимость повышения привилегий в pkexec из Polkit: writeup, tweet. Эта уязвимость существует и эксплуатируется на основных дистрибутивах Linux уже довольно долгое время. Патчи безопасности были...

CVE-2026-28372-GNU-inetutils-telnetd-Privilege-Escalation

CVE-2026-28372 — Повышение привилегий в GNU inetutils telnetd — PoC 👤 Автор Mohammed Idrees Banyamer Иордания 🇯🇴 Instagram: @banyamersecurity Исследователь безопасности | Наступательная безопасность | Разработка эксплойтов 🧨 Название эксплойта CVE‑2026‑28372 — Повышение привилегий в GNU inetutils...

CVE-2026-24072-Analysis

CVE-2026-24072: Анализ повышения привилегий modrewrite в Apache HTTP Server CVE-2026-24072 — это уязвимость локального повышения привилегий средней степени серьезности в Apache HTTP Server 2.4.66 и более ранних версиях. Она позволяет локальным авторам .htaccess читать произвольные файлы в файлово...

CVE-2026-0834

CVE-2026-0834 PoC Обход аутентификации в протоколе отладки устройств TP-Link TDDP CVE-2026-0834 Обзор Уязвимость в сервисе TDDP TP-Link Device Debug Protocol позволяет неаутентифицированным удалённым злоумышленникам в локальной сети выполнять административные команды. При обработке пакетов TDDPv2...

CVE-2026-31431-Copy-Fail-Detection-Toolkit

CVE-2026-31431 Copy Fail Detection Toolkit Набор инструментов для обнаружения и анализа CVE-2026-31431 «Copy Fail» — критической уязвимости локального повышения привилегий в Linux, затрагивающей дистрибутивы начиная с 2017 года. Обзор уязвимости CVE-2026-31431 эксплуатирует логическую ошибку в...

CVE-2026-6018-9-Local-Privilege-Escalation-Chain

CVE-2025-6018 + CVE-2025-6019: Local Privilege Escalation Chain Target OS: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x Required access: Unprivileged local user with SSH access Result: Full root shell Overview This document details the manual exploitation of two chained local privilege...

CVE-2026-24291

CVE-2026-24291 Obfuscated version of RegPwn https://www.mdsec.co.uk/2026/03/rip-regpwn/ Added extra functionality that it wiill automatically create a local administrator with generated credentials. You can re-compile the payload with code execution as administrator as desired. Steps - Compile th...

CVE-2021-4034

CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Build To compile, just use make Note : CentOS 8 Stream doesn't have dev tools. Install them with: dnf groupinstall 'Development Tools' Usage Execute ./cve-2021-4034 If your distro is vulnerable you will get root!...

cve-2026-31431

CVE-2026-31431 Copy Fail Detection and Mitigation Tool This project provides a set of Bash scripts for detecting and mitigating CVE-2026-31431 also known as "Copy Fail", a Linux kernel local privilege escalation vulnerability. Vulnerability Overview CVE ID : CVE-2026-31431 Vulnerability Type :...

DirtyFrag-Detector

🔍 Dirty Frag — CVE-2026-43284 / CVE-2026-43500 Detection Script TL;DR: There are two new Linux kernel bugs. This script tells you if you're vulnerable. Patch your stuff. What's this about? On May 7th 2026, a vulnerability class called Dirty Frag was publicly disclosed by security researcher Hyunw...

CVE-2025-27591

CVE-2025-27591 - Privilege Escalation via Insecure Log Handling Overview CVE-2025-27591 is a local privilege escalation vulnerability in the below utility versions prior to the patched release caused by insecure symbolic link handling within its logging mechanism. Attackers with local access can...

CVE-2026-12542

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not...

pkwner

██████╗ ██╗ ██╗██╗ ██╗███╗ ██╗███████╗██████╗ ██╔══██╗██║ ██╔╝██║ ██║████╗ ██║██╔════╝██╔══██╗ ██████╔╝█████╔╝ ██║ █╗ ██║██╔██╗ ██║█████╗ ██████╔╝ ██╔═══╝ ██╔═██╗ ██║███╗██║██║╚██╗██║██╔══╝ ██╔══██╗ ██║ ██║ ██╗╚███╔███╔╝██║ ╚████║███████╗██║ ██║ ╚═╝ ╚═╝ ╚═╝ ╚══╝╚══╝ ╚═╝ ╚═══╝╚══════╝╚═╝ ╚═╝ PoC н...

CVE-2026-102369

Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An unauthenticated attacker on the same local network can replay login challenge data to obtain an administrative session, enable a privileged service th...

CVE-2026-25548

CVE-2026-25548 — Remote Code Execution in InvoicePlane 1.7.0 Vulnerability: Remote Code Execution via Local File Inclusion + Log Poisoning Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Critical CVSS 3.1 Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CW...

CVE-2025-32463

CVE-2025-32463 – Sudo EoP Exploit PoC with precompiled library This repository contains a proof-of-concept PoC exploit for CVE-2025-32463 , a local privilege escalation vulnerability in sudo discovered by Rich Mirch. Credit https://github.com/kh4sh3i/CVE-2025-32463 ⚠️ Disclaimer This PoC is for...

CVE-2026-28372-GNU-inetutils-telnetd-Privilege-Escalation-main

CVE-2026-28372 — GNU inetutils telnetd Privilege Escalation PoC 👤 Author Mohammed Idrees Banyamer Jordan 🇯🇴 Instagram: @banyamersecurity Security Researcher | Offensive Security | Exploit Development 🧨 Exploit Title CVE‑2026‑28372 — GNU inetutils telnetd Privilege Escalation via...

copy-fail-CVE-2026-31431-IOC

copyfail-detect Detection toolkit for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation technique that corrupts page-cache data without changing the file on disk. Why This Exists Copy Fail can bypass traditional file integrity monitoring because the on-disk file is not modifie...

-CVE-2021-4034

-CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt " "Polkit formerly PolicyKit is a component for controlling system-wide privileges in Unix-like operating systems. It provides an organized way for non-privileged processes to communicate with privileged ones. ... It is als...

CVE-2026-31431-Linux-Copy-Fail

CVE-2026-31431 - Linux Copy-Fail Exploit Rust A Rust implementation of a local privilege escalation exploit for CVE-2026-31431 Copy-Fail. It allows executing customized shellcode such as Meterpreter Introduction Xint disclosed CVE-2026-31431, an arbitrary page cache write vulnerability that chain...