CVE-2021-34527

CVE-2021-34527 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 UPDATE June 2 2021 : Microsoft has released an advisory on CVE-2021-34527, correctly terming that specific identifier as the PrintNightmare vulnerability exploit. Previously, the community was assuming...

CVE-2021-4034-PwnKit

CVE-2021-4034-PwnKit PwnKit PoC for Polkit pkexec CVE-2021-4034 Based on the PoC by blasty blasty-vs-pkexec.c For PwnKit details see the blog poet at Qualys PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec CVE-2021-4034 Summary This repo is a nim based PwnKit PoC. Th...

IOBitMalwareFighterDLL

Malware Fighter LPE 0 day LPE I found in IObit Malware Fighter v. 13.2.0. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ Compile the DLL as x86 and name it Register.dll. Then place it in your system's Path. By default that is...

CVE-2025-32463

CVE-2025-32463 Exploit --- Proof-of-Concept PoC DISCLAIMER: This repository contains a proof-of-concept intended only for educational, defensive research, and authorized penetration testing. Do NOT use this code on systems you do not own or do not have explicit written permission to test...

CVE_2026_31431

CVE-2026-31431 Copy Fail – a 4‑byte page‑cache write primitive in the Linux kernel's authencesn AEAD template, exploitable via AFALG + splice. CVE-2026-31431 is a deterministic, race‑free logic bug in the Linux kernel. An unprivileged local user can overwrite 4 bytes in the page‑cache of any...

dissecting-pkexec-cve-2021-4034

Dissecting pkexec CVE-2021-4034 Introduction and Usage Introduction This is a part of the blog post that explains how CVE-2021-4034 actually works. Usage This repository contains a single C file that contains code and comments, the compilation and running the file is fairly straight forward:...

CVE-2026-24072-Analysis

CVE-2026-24072: Apache HTTP Server modrewrite Privilege Escalation Analysis CVE-2026-24072 is a moderate-severity local privilege escalation vulnerability in Apache HTTP Server 2.4.66 and earlier. It allows local .htaccess authors to read arbitrary files on the filesystem with the privileges of t...

CVE-2026-28372-GNU-inetutils-telnetd-Privilege-Escalation

CVE-2026-28372 — GNU inetutils telnetd Privilege Escalation PoC 👤 Author Mohammed Idrees Banyamer Jordan 🇯🇴 Instagram: @banyamersecurity Security Researcher | Offensive Security | Exploit Development 🧨 Exploit Title CVE‑2026‑28372 — GNU inetutils telnetd Privilege Escalation via...

CVE-2021-4034

CVE-2021-4034 Proof of Concept Qualys researches found a pretty cool local privilege escalation vulnerability in Polkit's pkexec: writeup, tweet. This vuln has been around and exploitable on major Linux distros for quite a long time. Security patches have been published, so I decided to write a...

CVE-2026-0834

CVE-2026-0834 PoC TP-Link Device Debug Protocol TDDP Authentication Bypass CVE-2026-0834 Overview A vulnerability in the TDDP TP-Link Device Debug Protocol service allows unauthenticated remote attackers on the local network to execute administrative commands. When processing TDDPv2 packets, a...

CVE-2026-31431-Copy-Fail-Detection-Toolkit

CVE-2026-31431 Copy Fail Detection Toolkit Detection and analysis toolkit for CVE-2026-31431 "Copy Fail" - a critical Linux Local Privilege Escalation vulnerability affecting distributions from 2017 onwards. Vulnerability Overview CVE-2026-31431 exploits a logic flaw in the Linux kernel's algifae...

CVE-2026-6018-9-Local-Privilege-Escalation-Chain

CVE-2025-6018 + CVE-2025-6019: Local Privilege Escalation Chain Target OS: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x Required access: Unprivileged local user with SSH access Result: Full root shell Overview This document details the manual exploitation of two chained local privilege...

DirtyFrag-Detector

🔍 Dirty Frag — CVE-2026-43284 / CVE-2026-43500 Detection Script TL;DR: There are two new Linux kernel bugs. This script tells you if you're vulnerable. Patch your stuff. What's this about? On May 7th 2026, a vulnerability class called Dirty Frag was publicly disclosed by security researcher Hyunw...

CVE-2021-4034

CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Build To compile, just use make Note : CentOS 8 Stream doesn't have dev tools. Install them with: dnf groupinstall 'Development Tools' Usage Execute ./cve-2021-4034 If your distro is vulnerable you will get root!...

CVE-2026-24291

CVE-2026-24291 Obfuscated version of RegPwn https://www.mdsec.co.uk/2026/03/rip-regpwn/ Added extra functionality that it wiill automatically create a local administrator with generated credentials. You can re-compile the payload with code execution as administrator as desired. Steps - Compile th...

cve-2026-31431

CVE-2026-31431 Copy Fail Detection and Mitigation Tool This project provides a set of Bash scripts for detecting and mitigating CVE-2026-31431 also known as "Copy Fail", a Linux kernel local privilege escalation vulnerability. Vulnerability Overview CVE ID : CVE-2026-31431 Vulnerability Type :...

CVE-2025-27591

CVE-2025-27591 - Privilege Escalation via Insecure Log Handling Overview CVE-2025-27591 is a local privilege escalation vulnerability in the below utility versions prior to the patched release caused by insecure symbolic link handling within its logging mechanism. Attackers with local access can...

pkwner

root@kitploit: ██████╗ ██╗ ██╗██╗ ██╗███╗ ██╗███████╗██████╗ ██╔══██╗██║ ██╔╝██║ ██║████╗ ██║██╔════╝██╔══██╗ ██████╔╝█████╔╝ ██║ █╗ ██║██╔██╗ ██║█████╗ ██████╔╝ ██╔═══╝ ██╔═██╗ ██║███╗██║██║╚██╗██║██╔══╝ ██╔══██╗ ██║ ██║ ██╗╚███╔███╔╝██║ ╚████║███████╗██║ ██║ ╚═╝ ╚═╝ ╚═╝ ╚══╝╚══╝ ╚═╝...

RottenPotato

This code is no longer maintained - for a newer implementation see https://github.com/breenmachine/RottenPotatoNG RottenPotato Local Privilege Escalation from Windows Service Accounts to SYSTEM For a technical overview of this exploit see our blog post at...

CVE-2026-25548

CVE-2026-25548 — Remote Code Execution in InvoicePlane 1.7.0 Vulnerability: Remote Code Execution via Local File Inclusion + Log Poisoning Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Critical CVSS 3.1 Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CW...