Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 This is a POC for the vulnerability...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

pkexec-lpe-poc POC for CVE-2021-4034 Original Write...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Polkit's Pkexec CVE-2021-4034 Proof Of Concept a...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Three PoC cases; two of them were collected fr...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Three PoC cases; two of them were collected fr...

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

Container running cve-2022-0185 crash POC !seccomp or busth...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

cve-2021-4034 PoC for cve-2021-4034 Based on the PoC by https...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 sudo apt install golang-go sudo apt in...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034-POC POC for pwnkit vulnerability discovered by...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Obviously not original. Reworked it to understa...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 This is an exploit created for CVE-2021-4034 m...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulne...

Add Subtitle <= 1.1.0 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks PoC The classic editor plugin is needed to see the sub-title field - Create a...

Exploit for SQL Injection in Moodle

CVE-2022-0332 Moodle 3.11 to 3.11.4 - SQL injection...

CVE-2021-45343

In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document...

Backdoor.Win32.Hanuman.b Code Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/4087cffab90fa22c2882e2f97a467e8e.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hanuman.b Vulnerability: Unauthenticated Remote Command Execution Description: The...

Local Privilege Escalation in polkits pkexec

A bug exists in the polkit pkexec binary in how it processes arguments. If the binary is provided with no arguments, it will continue to process environment variables as argument variables, but without any security checking. By using the execve call we can specify a null argument list and populat...

AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the id parameter before outputting it back in an attribute, leading to a Reflected cross-Site Scripting PoC https://example.com/wp-admin/admin.php?page=apcttestimonialedit=1"...

Exploit for Integer Overflow or Wraparound in Haproxy

CVE-2021-40346 Integer overflow on header request internal re...

Catch Web Tools < 2.7.1 - Subscriber+ Arbitrary Catch IDs Activation/Deactivation

The plugin does not have authorisation and CSRF check in its catchwebtoolscatchidsswitch AJAX action, allowing any authenticated users, such as subscriber to activate/disable Catch IDs PoC fetch"https://example.com/wp-admin/admin-ajax.php", "headers": "content-type":...