2471 matches found
FortiLPE
Description Local privilege escalation PoC exploit for CVE-2025-62676 / EUVD-2025-206993 that targets FortiClient VPN running on Windows. Executes a payload in the context of SYSTEM from a normal user context via an arbitrary XML file write. The PoC has been tested against FortiClient version 7.4...
Dirty-Pipe-CVE-2022-0847-POCs
Dirty-Pipe-CVE-2022-0847-POCs Author: Max Kellermann [email protected] Contributor: Bl4sty https://twitter.com/bl4sty A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann...
cve-2021-1675-printnightmare
================================================================================= Simple policy to detect CVE-2021-1675 Following functionality are provided by the script :: This zeek package Utilizes pcap and work of : https://github.com/LaresLLC/CVE-2021-1675.git root@kitploit: builds upon the...
CVE-2026-10795
CVE-2026-10795 Donate...
DirtyPipe
Dirty Pipe Exploit: CVE-2022-0847 The Dirty Pipe vulnerability, also known as CVE-2022-0847, is a significant flaw within the Linux kernel. This repository provides an adapted version of the widely used exploit code to make it more user-friendly and modular. A very good explanation of this...
CVE-2012-2982
CVE-2012-2982 Description file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character. Installation 1. git clone https://github.com/CpyRe/CVE-2012-2982.git 2. pip3 install -...
cve-2022-0847dirtypipe-exploit
cve-2022-0847dirtypipe-exploit...
CVE-2022-0847-DirtyPipe-Exploits
This repository does not have a README...
CVE-2024-40586-Windows-Coerced-Authentication-in-FortiClient
CVE-2024-40586 Windows Coerced Authentication in FortiClient On Windows system, it was found that FortiClient App version 7.0.8.0427 allow a remote unprivileged user to coerce Windows hosts authenticate to other machines via a named pipe responsible for FortiSSLVPNdaemon service. It was observed...
PrintSpoofer-ReflectiveDLL
PrintSpoofer Details PrintSpoofer is a tool that performs local privilege escalation by exploiting a vulnerability in the Windows Print Spooler service CVE-2019-1040 / CVE-2019-1019. This project implements the PrintSpoofer exploit in Reflective DLL format, making it suitable for use with...
CVE-2022-0847
CVE-2022-0847 Dirección original https://dirtypipe.cm4all.com/ Uso gcc exploit.cpp -o exploit ./exploit abre una shell de root Descripción de la vulnerabilidad Esto es CVE-2022-0847, una vulnerabilidad en el kernel de Linux desde la versión 5.8 que permite sobrescribir datos en archivos de solo...
Unity Linux 20.1070e Security Update: ghostscript (UTSA-2023-004048)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-004048 advisory. Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. Tenable has extracted th...
CVE-2022-0847-DirtyPipe-Exploits
CVE-2022-0847-DirtyPipe-Exploits This repository offers a comprehensive collection of exploits and documentation specifically designed for penetration testers and red team professionals. It serves as a valuable resource for those aiming to exploit the Linux Dirty Pipe vulnerability effectively...
DirtyPipe-BSI
Dirty...What? This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite the root password field in /etc/passwd and restore it after obtaining a root shell. Note: I claim no credit for finding this vulnerability or writing the proof of concept. This exploit is simply a...
CVE-2022-0847
CVE-2022-0847 exploit of CVE-2022-0847 which directly remove password of the root account Usage: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit Requrements: gcc Work summery: The traditional classic exploit POC of Max Kellermann used to add a user with root privilage but in this POC exploit, It...
dirty-pipe-poc
POC Exploit para agregar usuario a Sudo para CVE-2022-0847 Vulnerabilidad Dirty Pipe Este repositorio está basado en la Vulnerabilidad, el Writeup y el Exploit producidos por Max Kellermann que se encuentran todos aquí. Como todos, tuve que aprovechar jugar con la escalada de privilegios más...
CVE-2022-0847-dirty-pipe-checker
This repository does not have a README...
CVE-2022-0847-POC
CVE-2022-0847 CRÉDITOS: root@kitploit: autor de la vulnerabilidad: Max Kellermann explicación de Max Kellermann: https://dirtypipe.cm4all.com/ RECURSOS: root@kitploit: CACHÉ DE PÁGINA: https://manybutfinite.com/post/page-cache-the-affair-between-memory-and-files/ PIPE:...
Dirty-Pipe-CVE-2022-0847
Dirty-Pipe-CVE-2022-0847 CVE-2022-0847 Dirty Pipe is an arbitrary file overwrite vulnerability that allows escalation of privileges by modifying or overwriting arbitrary read-only files e.g. /etc/passwd, /etc/shadow. Steps 1. Compile using gcc cve-2022-0847-exploit.c -o cve-2022-0847-exploit 2. R...