206856 matches found
DirtyPipe_exploit
DirtyPipeexploit CVE-2022-0847...
CVE-2019-6329
Local Privilege Escalation in HP Support Assistant A local privilege escalation bug in HP Support Assistant by abusing hard link Researcher: ManhNDd of Bkav Description In HP Support Assistant GUI , when you click Check for updates and messages , the service HP Support Solution Framework will run...
CVE-2021-3560
CVE-2021-3650 CVE-2021-3650 Exploit Credit https://github.blog/security/vulnerability-research/privilege-escalation-polkit-root-on-linux-with-bug/ https://github.com/Almorabea/Polkit-exploit...
CVE-2023-21768
CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: root@kitploit: WindowsAFDLPECVE-2023-21768.exe where is the process ID in...
IOBitMalwareFighterDLL
Malware Fighter LPE 0 day LPE I found in IObit Malware Fighter v. 13.2.0. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ Compile the DLL as x86 and name it Register.dll. Then place it in your system's Path. By default that is...
wordpress-CVE-2024-10924--exploit
π WordPress Really Simple Security Plugin Vulnerability CVE-2024-10924 π Overview WordPress is one of the most popular open-source Content Management Systems CMS, powering millions of websites worldwideβfrom personal blogs to full-fledged e-commerce platforms. However, in November 2024 , a critic...
CVE-2022-37705
Suggested description A privilege escalation flaw was found on Amanda 3.5.1 that can take backup user to root privileges. The vulnerable component is the runtar SUID that is just a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. The program does not chec...
CVE-2018-5353
CVE-2018-5353 Zoho ManageEngine ADSelfServicePlus Client Privilege Escalation/RCE Information Vendor: Zohocorp Product: ManageEngine ADSelfServicePlus Versions Affected: Before 5.5 build 5517 Researcher: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 Description The cust...
CVE-2025-6019
CVE-2025-6019: libblockdev Local Privilege Escalation Vulnerability Summary CVE-2025-6019 is a local privilege escalation LPE vulnerability discovered in the libblockdev library, which interacts with the udisks2 daemon and Polkit. Vulnerability Description A local attacker with allowactive Polkit...
OHTS
OHTS Microsoft Windows - 'afd.sys' Local Kernel Privilege Escalation Exploit Report CVE-2011-1249...
CVE-2023-31443
CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE. Suggested description NorduGrid nordugrid-arc-wn 6.14.0 has the arc-job-cgroup SUID binary that is vulnerable to a path traversal attack. Combined with a race condition, the attacker can write the ppid to any file as long as the file is writable by...
PoC--CVE-2019-10149_Exim
PoC-CVE-2019-10149Exim MNEMO-CERT has developed a PoC that allows executing commands with elevated privileges by exploiting the vulnerability CVE-2019-10149, which affects different versions of Exim 4.87 - 4.91. To perform local exploitation of this vulnerability it is necessary to define the...
ptrace_scope-CVE-2019-13272-privilege-escalation
CVE-2019-13272 It is a privilege escalation vulnerability in Linux. Even now, in most Linux distros it has not been fixed. To run the exploit, you only need to have gdb installed. In the releases I will leave gdb binaries for some architectures. I have based it on the exploit made by s4vitar, but...
CVE-2025-32462_32463-Lab
CVE-2025-32462 & CVE-2025-32463 β PoC Lab This is a container-based lab and PoC for the following vulnerabilities in sudo: CVE-2025-32462 β sudo -h host matching logic bypass CVE-2025-32463 β sudo -R chroot NSS library escape π For educational purposes only. Do not use on systems you donβt own or...
CVE-2023-22809
CVE-2023-22809 Ref: https://vulners.com/cve/CVE-2023-22809 Exploit Title: sudo 1.8.0 - 1.9.12p1 - Privilege Escalation Exploit Author: n3m1.sys CVE: CVE-2023-22809 Date: 2023/01/21 Vendor Homepage: https://www.sudo.ws/ Software Link: https://www.sudo.ws/dist/sudo-1.9.12p1.tar.gz Version: 1.8.0 to...
CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-
This repository does not have a README...
rootOS
rootOS Intenta usar varios CVEs para obtener acceso sudo o root. Todos los exploits tienen el objetivo final de agregar ALL ALL=ALL NOPASSWD: ALL a /etc/sudoers permitiendo que cualquier usuario ejecute comandos sudo. Ejecutar root@kitploit: python root.py Exploits Nombre| CVE| Fecha| Enlaces...
CVE-2022-0847_dirty-pipe
CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...
CVE-2021-4034
Pwnkit Vulnerability - CVE-2021-4034 π Introduction Discovered in 2021 but announced and disclosed in January 2022, CVE-2021-4034 was affectionately named Pwnkit, however, it is available in all versions of the Policy Toolkit - Polkit package in practically all OS - Linux distributions. In short,...
CVE-2021-3560
Polkit Vulnerability - CVE-2021-3560 π Introduction In 2021, a researcher named Kevin BackHouse discovered a privilege escalation vulnerability in the polkit utility. however, not all linux versions are vulnerable to polkit. Below is an example of a vulnerable version; Red Hat Enterprise Linux 8...