CVE-2026-38764

CVE-2026-38764 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

CVE-2023-31716

CVE-2023-31716 Name Affected product: FUXA Version affected: = 1.1.12 Problem: Local File Inclusion Description: FUXA 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...

CVE-2026-23111-nftables-lab

CVE-2026-23111 nftables LPE: exposure check and safe lab Defensive tooling and a reproducible virtual-machine lab for CVE-2026-23111, the nftables use-after-free local privilege escalation in the Linux kernel an inverted element-activity check in nftmapcatchallactivate, the "off by !" bug. An...

CVE-2008-6827

CVE-2008-6827 Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation Exploit-DB publication at https://www.exploit-db.com/exploits/5625/ Author Alex Hernandez aka @alt3kx...

CVE-2025-65320

CVE-2025-65320 Title Cleartext Storage of Sensitive Licensing Material in Process Memory in Abacre Restaurant Point of Sale POS Overview A vulnerability exists in Abacre Restaurant Point of Sale POS versions = 15.0.0.1656 where sensitive licensing data is stored in cleartext in process memory...

CVE-2025-27519

Below Privilege Escalation Exploit CVE-2025-27519 This repository contains a proof-of-concept PoC Bash script to exploit the Below privilege escalation vulnerability CVE-2025-27519 on Linux systems. The exploit allows a local user to escalate privileges to root by abusing the way the below binary...

Adaptive_Greedy_Local_Search

Adaptive Greedy Local Search AGLS Semantic-Preserving Prompt Hijacking: A Black-Box Adversarial Attack on Auto-Prompt Optimization ICME 2026 Abstract: Large Language Models LLMs are increasingly equipped with automatic prompt-optimization modules that rewrite the user’s input and explicitly prese...

bazad5

bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4-byte XFRM/ESP Proof-of-concept local privilege escalation via XFRM/ESP page-cache corruption 4-byte write primitive · 48 iterations · 192-byte ELF overwrite · unprivileged user + netns Proof of concept Left: kernel preflight, setuid scan, and exploit chain · Right: root shell...

ExploitVelotiSmart

ExploitVelotiSmart Allows exploiting the LFI vulnerability CVE-2018-14064 https://medium.com/@s1kr10s/velotismart-0day-ca5056bcdcac https://www.exploit-db.com/exploits/45030/...

rewolf-msi-exploit

rewolf-msi-exploit MSI NTIOLib/WinIO Local Privilege Escalation More info can be found here: http://blog.rewolf.pl/blog/?p=1630...

CVE-2019-5418

CVE-2019-5418 Test case Run : root@kitploit: $ rails s PoC : root@kitploit: Accept: ../../../../../../../../etc/passwd Req 1 - root@kitploit: GET /shitblock HTTP/1.1 Host: REDACTED:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:65.0 Gecko/20100101 Firefox/65.0 Accept:...

webshell

webshell 简体中文 This is a webshell collection project Give someone a rose, there is a fragrance in your hand if you download this project, please also submit a shell This project covers various common scripts Such as: asp, aspx, php, jsp, pl, py If you submit a webshell, please do not change the na...

LGPwn

LGPwn LG Root Exploit Author: [email protected] Special Thanks: Juggie, for pointing out an odd binary in an update spritebud, that lead to me finding this vulnerability. Subject: Race condition in Sprite Software?s backup software, installed by OEM on LG Android devices. CVE ID: CVE-2013-36...

CVE-2021-4034

CVE-2021-4034 This contains single-file exploit for cve-2021-4034 which is a Polkit Local Privilege Escalation. Use it wisely! Vulnerability Description CVE-2021-4034, commonly referred to as Pwnkit , is a memory corruption vulnerability in the pkexec component of Polkit, a toolkit used for...

CVE-2026-31431

CVE-2026-31431 "Copy Fail" - Research & Pentesting Tool ⚠️ DISCLAIMER This project is provided strictly for: Security research Educational purposes Authorized penetration testing CTF and laboratory environments By using this tool, you agree that: You own the target system or You have explicit...

EUVD-2026-83847

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

CVE-2026-94146 BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...