CVE-2026-1880

CVE-2026-1880 https://github.com/user-attachments/assets/2602558f-abd8-4773-9094-64c32501dfed ASUS DriverHub Update TOCTOU LPE ASUS DriverHub Driver Update Process TOCTOU Vulnerability Leading to LPE Technical Resources Technical Presentation PDF 한국어.md | English.md Asus Hall of Fame Afterword...

CVE-2021-41277_SSRF

CVE-2021-41277SSRF CVE-2021-41277 can be extended to an SSRF Description Metabase is an open source data analytics platform. Metabase versions 0.40.5 were affected by CVE-2021-41277 which led to local file inclusion according to the CVE description. While analyzing the finding described in Metaba...

CVE-2021-4034-POC

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

copyfail-rs

copyfail-rs Copy Fail exploit CVE-2026-31431 but in Rust, a critical vulnerability chaining AFALG and splice to achieve a 4-byte page cache write, leading to local privilege escalation on major Linux distributions. Based on the research and PoC by Xint Code. Disclaimer !CAUTION This project is fo...

CVE-2026-43284-

CVE-2026-43284 Dirty Flag Local Privilege Escalation As of early May 2026, Dirty Frag refers to a high-severity Linux kernel vulnerability CVE-2026-43284 and CVE-2026-43500.Impact: It allows unprivileged users to gain root access full administrative control by exploiting how the kernel handles...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail is a logic bug in the Linux kernel's crypto subsystem CVE-2026-31431. A 2017 optimization in algifaead.c accidentally placed page cache pages into a writable scatterlist. The authencesn AEAD algorithm writes 4 scratch bytes past the output boundary during...

CVE-2021-4034

CVE-2021-4034 - Docker Container Deliberately Vulnerable Version Docker PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2025-32463

CVE-2025-32463: Sudo Local Privilege Escalation Vulnerability Summary CVE-2025-32463 is a Local Privilege Escalation LPE vulnerability discovered in Sudo. An attacker can exploit this vulnerability to gain root privileges under certain conditions. Vulnerability Details Vulnerability Description: ...

pwnkit-go

Pwnkit-go This is a working exploit for the pwnkit vulnerability, CVE-2021-4034, written in Go Give it a try: create a vulnerable vagrant machine $ make vm ... build the binary and scp it to the vagrant box $ make scp ssh onto the vagrant box $ make ssh The default user is "vagrant"...

copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail 732 bytes. Any distro. Root. A straight-line logic flaw in the Linux kernel's authencesn cryptographic template enables an unprivileged local user to perform a precise, controlled 4-byte write into the page cache of any readable file — including setuid binaries. No race...

CVE-2025-57457

OS Command Injection in CURO UC300 IP Phone An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter. PoC: https://github.com/restdone/CVE-2025-57457/blob/main/oscommandinject.mp4 Step...

CVE-2025-32463

CVE-2025-32463 — Sudo 1.9.14 → 1.9.17 Local Privilege Escalation via chroot Exploit script demonstrating a local privilege escalation affecting certain Sudo 1.9.x releases CVE-2025-32463. Exploit reference: https://www.exploit-db.com/exploits/52352 Tested on: Ubuntu 24.04.2 LTS with sudo 1.9.16p2...

CVE-2021-4034

Python3 code to exploit CVE-2021-4034 PWNKIT. This was an exercise in "can I make this work in Python?", and not meant as a robust exploit. It Works For Me, there are problaby bugs. The default payload starts a shell as root, generated from msfvenom: msfvenom -p linux/x64/exec -f elf-so...

cve-2026-21509-mitigation

CVE-2026-21509 Mitigation Script Traditional Chinese version: READMEzh-TW.md Overview This script applies a registry-based mitigation to protect against CVE-2026-21509 Microsoft Office security feature bypass vulnerability, which has been exploited in the wild. CVE ID: CVE-2026-21509 Severity:...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: localuser@ubuntu-poc:/CVE-2021-4034$ make cc -Wall...

Copy-Fail-Exploit-CVE-2026-31431

Copy Fail CVE-2026-31431 – Exploit Usage Guide ⚠️ Disclaimer This content is for educational and authorized security testing purposes only. Do NOT run this on systems without explicit permission. 📌 Overview Copy Fail CVE-2026-31431 is a Linux Local Privilege Escalation LPE vulnerability affecting...

Copy-Fail

CVE-2026-31431 "Copy Fail" - Local Privilege Escalation Python 3.7+ compatible version including Astra Linux Safe check without exploitation: curl -s https://raw.githubusercontent.com/p401a-ops/Copy-Fail/refs/heads/main/detect.py | python3 Exploitation when prompted, you will need to enter the us...

CVE-2026-31431

CVE-2026-31431: Copy Fail PoC + ARM64 Validation Copy Fail is a Linux local privilege escalation published by Theori/Xint as CVE-2026-31431. The project page describes a logic bug in authencesn that can be reached through AFALG and splice, producing a small page-cache write against a setuid binar...

CVE-2026-30480

CVE-2026-30480: LibreNMS Local File Inclusion LFI via Path Traversal Overview A Local File Inclusion LFI vulnerability exists in the NFSen module of LibreNMS. An authenticated attacker can exploit path traversal sequences to include arbitrary PHP files from the server filesystem. Field| Value...

CVE-2026-20817

CVE-2026-20817 - Windows Error Reporting WER ALPC Privilege Escalation Description This repository contains a Proof-of-Concept PoC for CVE-2026-20817 , a local privilege escalation vulnerability in the Windows Error Reporting WER service. The vulnerability allows an authenticated low-privileged...