207162 matches found
qu1ckr00t
qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...
CVE-2026-0827
CVE-2026-0827 The LdeApi.Server.exe process attempts to write MP27AM7Westimation.json to C:\ProgramData\Lenovo\LDE\SYSTEM without impersonation. This directory does not exist by default. Since C:\ProgramData\ allows standard users to create subdirectories, a low-privileged user can create this pa...
WinBypass
Windows UAC Bypass | Privilege Escalation Slui File Handler Hijack LPE - Windows 8-10 SluiHijackBypass.ps1 UAC Bypass via FodHelper - Windows 10 FodhelperBypass.ps1 UAC Bypass via Event Viewer - Windows 7 EventVwrBypass.ps1 Metasploit-Framework Module bypassuacsluihijack.rb copy...
CentOS-Control-Web-Panel-CVE
CentOS Control Web Panel version 0.9.8.836 - 0.9.8.847 On June 29, 2019 our team started to find vulnerability on CentOS Control Web Panel CWP version 0.9.8.836, and we found some critical vulnerabilites. Some of the vulnerabilities we found can be chained to compromise the server from anonymous...
tippa-my-tongue
Tippa My Tongue Tippa My Tongue is an exploit that uses CVE-2022-1388 and CVE-2022-41800 to establish a root reverse shell on F5 BIG-IP products. Most CVE-2022-1388 exploits achieve code execution using /mgmt/tm/util/bash. However, this exploit uses /mgmt/shared/iapp/rpm-spec-creator, followed by...
CVE-2023-32428-a-macOS-LPE-via-MallocStackLogging
CVE-2023-32428-a-macOS-LPE-via-MallocStackLogging...
cve-2019-5736-poc
To run: 1. edit poc command in stage2.c 2. build docker docker build -t cve . 3. run docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. backup docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. in docker run cd /root && ./run.sh && exi...
CVE-2022-22077
✅ CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...
CVE-2023-36645
== Affected Software %hardbreaks Vendor: ITB-GmbH Affected Products: TradePro v9.5 Component: Function Customer; Action oordershow Confirmed: yes == Attack Vector %hardbreaks Type: SQLi Access-Type: Remote Impact: Information Disclosure; Escalation of Privileges SQL injection in function customer...
CVE-2025-25615
CVE-2025-25615 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to view the attendance list for all class sections. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to the following endpoint:...
CVE-2026-40369-EXPLOIT
Full Blog - https://pwn2nimron.com/blog CVE-2026-40369: Arbitrary Kernel Address Increment via NtQuerySystemInformation Class 253 Summary Type: Arbitrary kernel write increment — PRIVILEGE ESCALATION PRIMITIVE Component: ntoskrnl.exe — ExpGetProcessInformation Trigger:...
CVE-2022-0185
CVE-2022-0185 Linux Kernel Privilege Escalation Escape toc Vulnerability Overview Vulnerability ID: CVE-2022-0185 CVSS Score: Affected Product: linux kernel - fsconfig syscall Affected Versions: linux kernel 5.1-rc1 5.16.2 Exploitation Requirements: Linux local; requires CAPSYSADMIN capability ca...
CVE-2017-0564-ION-PoC
CVE-2017-0564-ION-PoC ION universal privilege escalation vulnerability PoC and analysis LINK: https://android.googlesource.com/platform/cts/+/master/hostsidetests/security/securityPatch/CVE-2017-0564/ Vulnerability reporter: guoygang...
container-cve-2021-22555
Reproducer for CVE-2021-22555 as a container First, this rolls in the exploit code from here as a handy pre-built container: https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 Pre-built container: quay.io/cgwalters/cve-2021-22555 Mitigation: seccomp profiles A stron...
bazad5
bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...
CVE-2021-24356
CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Subscriber + Arbitrary Plugin Installation Description A lack of capability checks and insufficient nonce check on the AJAX action in the plugin, made it possible for authenticated users to install arbitrary plugins on vulnerabl...
CVE-2022-2639-PipeVersion
CVE-2022-2639 using pipe primitive CVE-2022-2639: Linux kernel openvswitch local privilege escalation. introduced in: e64457191a259537bbbfaebeba9a8043786af96f v3.13 fixed in: cefa91b2332d7009bc0be5d951d6cbbf349f90f8 v5.18 Using pipe-primitive to exploit CVE-2022-2639, so no kaslr leak nor smap sm...
CVE-2022-42046
EvilWfshbr CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation wfshbr64.sys and wfshbr32.sys specially crafted payload allows arbitrary user to perform bitwise operation with arbitrary EPROCESS offset and flags value to purposely elevate the game process to CodeGen Full...
yalu102
yalu102 A "work in progress" iOS jailbreak for 64-bit devices created by qwertyoruiopz and marcograssi. Please use the "Issues" tab for code related issues only. If you need support please search on /r/jailbreak before posting a question there. Supported Devices and iOS versions Device| Version...