CVE-2003-0358

CVE-2003-0358 Posting for historical reasons. snowcrash [email protected] https://github.com/snowcra5h/ Description Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line...

Gogs_RCE

GogsRCE Vulnerability Reproduction 0x01 Register a Regular Account on the Frontend 0x02 Compile a Forged Admin Session Using Go go run main.go root@kitploit: package main import "bytes" "encoding/gob" "encoding/hex" "fmt" "io/ioutil" func EncodeGobobj mapinterfaceinterface byte, error for , v :=...

CVE-2023-45992

CVE-2023-45992 A vulnerability in Ruckus CloudPath 5.12 build 5538 or before could allows a remote unauthenticated attacker to obtain full administrator privileges by leveraging Stored Cross-Site Scripting and Cross-Site Request Forgery Vulnerability using a crafted script. On 16 Oct 2023, the...

CVE-2022-35899

CVE-2022-35899 Unquoted Service Path Asus GameSdk Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path Privilege Escalation Date: 07/14/2022 Exploit Author: Angelo Pio Amirante Version: 1.0.0.4 Tested on: Windows 10 Patched version: 1.0.5.0 Step to discover the unquoted...

CVE-2021-4034

CVE-2021-4034 Esto contiene un exploit de un solo archivo para cve-2021-4034, que es una escalada de privilegios local de Polkit. ¡Úsalo con sabiduría! Descripción de la vulnerabilidad CVE-2021-4034, comúnmente conocida como Pwnkit , es una vulnerabilidad de corrupción de memoria en el componente...

CVE-2024-56116

CVE-2024-56116 Suggested description A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account. Vulnerability Type CWE-352 | Cross-Site Request Forgery CSRF Vendor of Product Amiro.CMS https://www.amiro.ru Affected Product Code...

oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux 内核提权研究 项目概述 GhostLock CVE-2026-43499 是一个影响 Linux 2.6.39 至 7.1-rc1 的内核栈 UAF 漏洞，通过 FUTEXCMPREQUEUEPI 竞态条件触发。本项目将 NebuSec/CyberMeowfia 的 x8664 exploit 适配到 OPPO Find N2 ARM64, kernel 5.10.236。 项目状态 迭代中 — 多个利用阶段已验证通过，但核心阻塞点（CFI bypass /...

poc_CVE-2018-1002105

CVE-2018-1002105 PoC PoC autenticado Demostración Uso PoC no autenticado Demostración Uso PoC autenticado Exploit de prueba de concepto para CVE-2018-1002105. El exploit actual requiere privilegios create y get en pods y pods/exec. Se ha añadido soporte para portforward y attach, que requieren...

CVE-2021-3156

CVE-2021-3156 Visualización, Fuzzing, Explotación y Parche de la Vulnerabilidad Baron Samedit Ver informe » Francesco Marchiori · Alessandro Lotto Tabla de Contenidos 1. Resumen 2. Visualización 3. Fuzzing 4. Explotación 5. Parche 🧩 Resumen Cualquier sistema operativo basado en Unix dispone del...

CVE-2023-21768

CVE-2023-21768 Windows Ancillary Function Driver for WinSock According to the detailed description of CVE-2023-21768 published by the Microsoft Security Response Center MSRC, the vulnerability exists in the Ancillary Function Driver AFD, whose system file is afd.sys. The AFD module is the kernel...

SharpPrivesc

SharpPrivesc Practicing C and bringing Privesc attack surfaces together. Still noob stuff. Privesc checks and the like. I preferred Spectreops command line parsing classes so decided to utilize theirs over other .net packages like command line parser etc. To-Do: Menu More Privesc Check modules...

ADCSPwn

ADCSPwn Una herramienta para escalar privilegios en una red de Active Directory mediante la coerción de autenticación de cuentas de máquina Petitpotam y la retransmisión al servicio de certificados. Uso Ejecuta ADCSPwn en tu red objetivo. root@kitploit: Author: @batsec - MDSec ActiveBreach...

CVE-2016-5195

Description: dcow is a possible exploit of the vulnerability CVE-2016-5195. Running the program as unprivileged user on a vulnerable system, it'll modify the /etc/passwd file, forcing the password "dirtyCowFun" SHA-512, but could be modified for older standards. In case of successful execution,...

rootOS

rootOS Intenta usar varios CVEs para obtener acceso sudo o root. Todos los exploits tienen el objetivo final de agregar ALL ALL=ALL NOPASSWD: ALL a /etc/sudoers permitiendo que cualquier usuario ejecute comandos sudo. Ejecutar root@kitploit: python root.py Exploits Nombre| CVE| Fecha| Enlaces...

CVE-2020-23592

CVE-2020-23592 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allow an unauthenticated, remote attacker to conduct a cross-site...

dirtypipe

About: Title: DirtyPipe Description: Exploit for a new Linux vulnerability known as 'Dirty PipeCVE-2022-0847' allows local users to gain root privileges. AUTHOR: drapl0n Version: 1.0 Category: Execution Target: Linux operating systems. Attackmodes: HID, Storage DirtyPipe: Exploit for a new Linux...

CVE-2025-25062

CVE-2025-25062 Descripción Uso Ejemplo Cronología Descripción Existe una vulnerabilidad de Cross-Site Scripting XSS almacenado en la página de edición de entradas de Backdrop CMS 1.29.2. Este script encadena la vulnerabilidad con una carga útil CSRF para lograr una escalada de privilegios desde e...

mach_race

Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binary: ./machraceserver /bin/ps compatmode for i in seq 0 1000000; do...

CVE-2021-3156

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on Ubuntu 20.04 against sudo 1.8.31 All research credit: Qualys Research Team Check out the details on their blog. You can check your version of sudo is vulnerable with: $ sudoedit -s Y. If it asks f...

CVE-2025-27580

CVE-2025-27580: Toma de Cuentas No Autenticada en NIH BRICS NIH BRICS también conocido como Biomedical Research Informatics Computing System hasta la versión 14.0.0-67 genera tokens predecibles que dependen del nombre de usuario, la hora y la cadena fija 7Dl9dj- y, por lo tanto, permite que...