CVE-2023-34598

Gibbon v25.0.0 - Local File Inclusion - CVE-2023-34598 Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI vulnerability where it's possible to include the content of several files present in the installation folder in the server's response. Proof of Concept In order to exploit the...

CVE-2021-33909

CVE-2021-33909 Sequoia Writeup root@kitploit: gcc exploit.c -o exploit -lpthread -DBLOCKVIAUSERFAULTFD gcc exploit.hello.c -o exploit.hello -lpthread -lfuse -DFILEOFFSETBITS=64 root@kitploit: $ mkdir dir $ ./exploit $pwd/dir id...

CVE-2026-36213

CVE-2026-36213 CVE-2026-36213 | Local Privilege Escalation in MEmu Android Emulator 9.2.7.0 via Insecure Service Binary Permissions | Patched in 9.3.2 CVE-2026-36213 — MEmu Android Emulator 9.2.7.0 LPE Summary A Local Privilege Escalation LPE vulnerability in MEmu Android Emulator 9.2.7.0. The...

Puwr

Contents About Puwr Puwr Usage Port scanning Showcases Disclaimer Future Puwr Easily expand your attack surface on a local network by discovering more hosts, via SSH. Using a machine running a SSH service, Puwr uses a given subnet range to scope out IP's, sending back any successful ping requests...

duckdb

Jepsen DuckDB Test Jepsen tests for the DucKDB database. Runs locally, rather than on a remote cluster. The test spawns a collection of local processes which open a DuckDB file locally, and interacts with them over STDIN/STDOUT. This is an early prototype. It turns on, runs transactions, checks...

CVE-2024-31719----AMI-Aptio-5-Vulnerability

AMI-Aptio--NvLock-Vulnerability Information CVE ID: CVE-2024-31719 Link Vulnerability Type: Incorrect Access Control Vendoer of Product: American Megatrends International, LLC. Product: AMI Aptio - 5 Atack Type: Local Attack Vector The attacker can easily bypass the NvLock module's access...

CVE_Project

CVEProject Preparations for exploitation: 1.Install Tomcat 7 on the virtual machine sudo apt-get install tomcat7 2.If the first step is failed,set JDKDIRS="/usr/lib/jvm/java-8-oracle" and add the statements “export JAVAHOME=/usr/lib/jvm/java-8-oracle” and “export CATALINAHOME=/usr/share/tomcat7”...

linux-smart-enumeration

First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...

ghostlock-emerald

GhostLock para POCO M6 Pro emerald GhostLock CVE-2026-43499 es un use-after-free de 15 años de antigüedad en el código de herencia de prioridad de futex del kernel de Linux que permite a cualquier usuario local obtener root. Este proyecto lo utiliza para rootear el POCO M6 Pro MediaTek Helio G99...

CVE-2022-34918-LPE-PoC

CVE-2022-34918 LPE PoC LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic You can find the associated write-up on our blog Usage getroot should be in the current folder root@kitploit: $ ls getroot poc $ ./poc...

CVE-2025-47181

CVE-2025-47181 Concept: Microsoft Edge Link Following Privilege Escalation Project Overview This repository presents the CVE-2025-47181 Concept , a Python program designed to illustrate the mechanism and impact of CVE-2025-47181. This is a Privilege Escalation vulnerability in Microsoft Edge...

ForgottenButNotGone

Forgotten but Not Gone This repository contains proof-of-concept scripts for the vulnerabilities presented at the talk "Forgotten but Not Gone: Unauthenticated RCEs and LPEs in Legacy Linux Services" from Black Hat USA 2026 and DEF CON 34. CVE-2026-28372 Local privilege escalation in TelnetD:...

CVE-2021-34527

CVE-2021-34527 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 UPDATE June 2 2021 : Microsoft has released an advisory on CVE-2021-34527, correctly terming that specific identifier as the PrintNightmare vulnerability exploit. Previously, the community was assuming...

CVE-2019-14678

CVE-2019-14678: Entidad Externa XML en SAS XML Mapper SAS XML Mapper 9.45 tiene una vulnerabilidad de Entidad Externa XML XXE que puede ser aprovechada por atacantes malintencionados de múltiples maneras. Algunos ejemplos son la Lectura de Archivos Locales, la Exfiltración de Archivos Fuera de...

CVE-2021-33739-POC

CVE-2021-26868 LPE & CVE-2021-33739 POC...

CVE-2025-3464-AsIO3-LPE

CVE-2025-3464-AsIO3-LPE CVE-2025-3464: Unprivileged LPE exploit for ASUS AsIO3.sys - TOCTOU auth bypass + PreviousMode decrement CVE-2025-3464: AsIO3.sys Local Privilege Escalation This exploit will only work on Windows 11 22H2 or earlier. Microsoft fixed PreviousMode hijinks. Local privilege...

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Escalada local de privilegios universal en el kernel de Linux 📋 Resumen Dirty Frag también conocido como Copy Fail 2 es una vulnerabilidad de escalada local de privilegios de alto impacto en el kernel de Linux. Permite que un usuario local sin privilegios obtenga...

ESFileExplorerOpenPortVuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447 As per their Google Play description: ES File Explorer File Manager is a full-featured file Images, Music, Movies, Documents, app manager for both local and networked use! With over 500 million users worldwide, ES File Explorer File Manager...

iomfb-exploit

Write up is here: https://jsherman212.github.io/2021/11/28/poppingios14withiomfb.html Exploit for CVE-2021-30807. If you really want to build a jailbreak out of it, it will require tuning for your device and iOS version because I have no info leak to use for this. To tune for A11 and below, use...

CVE-2021-27965

CVE-2021-27965 Simple PoC for exploiting CVE-2021-27965 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-27965 An issue was discovered in signed MICSYS windows driver MsIo64.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine suffers from...