CVE-2023-42829

CVE-2023-42829；'App 或许能够访问 SSH 口令短语' 本文档既包含对 macOS 上 ssh 二进制中一个逻辑漏洞的分析（我的第一个软件漏洞！），也包含演示 Apple 如何修复该漏洞的补丁分析。我于 2022 年底通过 Apple 安全赏金计划向 Apple 报告了该问题，它后来在 macOS Ventura 13.5 中修复，并产生了 CVE-2023-42829（🎉）。该问题导致保存在 macOS 用户本地"登录"钥匙串（com.apple.ssh.passphrases 访问组）中的 SSH 口令短语以明文形式暴露给本地攻击者。 免责声明：...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

CVE-2025-29824

CVE-2025-29824 win1021h2190445608x64 win1123h2226315126x64 testclient test program monitorclfssys driver to monitor all IRP requests of clfs poc Crash Blue screen poc LPE win10poc win11poc Compilation basic information Windows SDK version: 10.0 latest installed version Platform toolset: Visual...

SeriousSam

SeriousSam HiveNightmare a.k.a. SeriousSam Local Privilege Escalation in Windows – CVE-2021-36934...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. Affected versions The exploit affects versions from includin...

CVE-2023-26269

CVE-2023-26269：Apache James 中的 JMX 配置错误 默认情况下，Apache James 会打开一个 JMXRMI 服务，该服务监听 localhost 的 9999 端口。由于 JMX 配置错误，允许未经身份验证的访问，因此能够本地访问运行 James 机器的攻击者可以使用 “MLet 攻击” 来加载任意 MBean 并执行恶意 Java 代码。 由于应用程序需要提升权限才能监听 SMTP、POP3、IMAP（25、110、143）端口，该应用程序通常以 “root” 用户身份运行，从而增加了潜在的本地权限提升（LPE）攻击的影响。 厂商披露：...

CVE-2025-50422

Poppler before version 25.04.0 When pdftocairo renders a malicious PDF and calls cairodebugresetstaticdata on exit, heap memory containing PDF object streams is not properly cleared. An attacker with local access can dump process memory and recover clear-text PDF content e.g., /stream /endstream...

CVE-2023-4911-Lab

CVE-2023-4911 "Looney Tunables" Analysis Environment Docker-based practice environment for analyzing and developing exploits for the GNU C Library glibc dynamic loader buffer overflow vulnerability Local Privilege Escalation. CVE Information Item| Content ---|--- CVE Number| CVE-2023-4911 Alias|...

Exploit for CVE-2026-36213

CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Es...

Exploit-PoC-para-CVE-2024-30085

🚨 Exploit PoC for CVE-2024-30085 Proof of Concept exploit for the CVE-2024-30085 privilege escalation vulnerability. For educational and security research purposes only. ⚠️ Legal Warning FOR EDUCATIONAL USE ONLY ✅ Authorized security research ✅ Controlled laboratories ✅ Cybersecurity education ❌...

CVE-2024-48990

PoC for CVE-2024-48990 CVE-2024-48990 is a local privilege escalation vulnerability found in the needrestart utility. The vuln exists in versions prior to 3.8. The service, which runs as root during events like package installations, insecurely scans all running processes. When it finds a Python...

evillcode

🔥 Evillcode - Modular MITM Framework Modular cybersecurity framework developed in Python for analysis, monitoring, and simulation of MITM attacks in local networks. It allows students and professionals to understand the inner workings of networks, protocols, and vulnerabilities in controlled...

CVE-2012-6422

Exynos Exploit This is a POC for exploiting the /dev/exynos-mem vulnerability introduced in earlier samsung phones. It was done out of interest in kernel vulnerability research and as a part of a CTF challenge. The Exploit The vulnerability introduced in these phones is the permissions for the...

CVE-2024-0670

CVE-2024-0670 – Local Privilege Escalation in CheckMK Agent PowerShell PoC Abstract This repository presents an independent PowerShell proof of concept for CVE-2024-0670 , a Windows local privilege escalation vulnerability in the CheckMK Agent. The vulnerability allows a low-privileged local user...

moltis

Moltis — A secure persistent personal agent server in Rust One binary — sandboxed, secure, yours. Installation • Comparison • Architecture • Security • Features • How It Works • Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...

openclaw

OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an open-source AI assistant that runs on your own computer and meets you in the channels you already use: Discord, iMessage, Slack, Teams, Telegram, WhatsApp, and 20+ more, plus native apps for macOS, iOS, Android, Windows, a...

CVE-2015-1328

CVE-2015-1328 Proof of Concept A Proof of Concept PoC exploit for CVE-2015-1328, a privilege escalation vulnerability affecting the Linux kernel's overlayfs implementation. This vulnerability allows local unprivileged users to gain root access by exploiting improper permission checks in overlayfs...

CVE-2024-0670

CVE-2024-0670 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2024-0670 vulnerability, affecting the CheckMK Agent on Windows systems. The vulnerability occurs when the CheckMK Agent creates and executes temporary files in the C:\Windows\Temp directory. An attacker can abu...

Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462

⚠️ CVE‑2025‑32463 和 CVE‑2025‑32462 – Linux 中 Sudo 权限提升漏洞 🧠 简要总结 2025 年 7 月，sudo 工具中新披露的两个漏洞——CVE-2025-32463 和 CVE-2025-32462 ——使众多 Linux 发行版面临风险。其中更为严重的 CVE‑2025‑32463 的 CVSS 评分为 9.3 ，可实现本地权限提升 并可能导致系统完全沦陷。漏洞利用代码已在野外出现。请尽快 修补。 🔍 什么是 Sudo？ sudo 是几乎所有 Unix 系统上的核心工具，允许用户以另一个用户（通常是 root）的身份运行命令。它是...

CVE-2024-26574

CVE-2024-26574 Wondershare Filmora v.13.0.51 - Insecure Permissions Privilege Escalation Description: Insecure Permissions vulnerability in Wondershare Filmora and versions below allows a local unprivileged attacker to execute arbitrary code as SYSTEM via a crafted script to the controlable path...