CVE-2021-22555-Poc

堆溢出 CVE CVE-2021-22555 漏洞列表 堆越界写入（核心漏洞） 数据损坏（即时影响） 内存泄漏 / 信息泄露 权限提升（最终目标） 1. 安装编译工具（不要运行 apt upgrade） 下载 ISO wget http://old-releases.ubuntu.com/releases/20.04.2/ubuntu-20.04.2-live-server-amd64.iso 下载所需的库 sudo apt update sudo apt install build-essential gcc-multilib 下载所需的内核 sudo apt install...

dirtypipe2

dirtypipe2 Linux Kernel 5.8 5.15.25 - Élévation locale de privilèges DirtyPipe 2 Auteur de l'exploit: Antonius w1sdom github : https://github.com/bluedragonsecurity web : https://www.bluedragonsec.com testé sur : linux kernel 5.13.0-21-generic compilé sur lubuntu 20.04.5 linux lubuntu 20.04.2 -...

CVE-2026-73638

Imager versions from 0.4502 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiffloadifd. tiffloadifd validates an IFD entry's data by checking that entry-offset + entry-size stays within the EXIF block, and never checks the start offset itself. Where that sum is n...

CVE-2026-76154

A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuration, enabling escalation to Org Admin...

kernel-exploit-dirtycow-project-subm

kernel-exploit-dirtycow-project-subm Escalada de Privilegios Dirty COW CVE-2016-5195 Este proyecto demuestra un escenario de escalada de privilegios en un entorno de laboratorio controlado utilizando la vulnerabilidad Dirty COW en un kernel de Ubuntu 16.04 afectado por CVE-2016-5195. Entorno VM...

GTFOBLookup

GTFOBLookup Utilidad de consulta de línea de comandos sin conexión para GTFOBins, LOLBAS, WADComs y HijackLibs. Archivos .gitignore : Archivo Gitignore gtfoblookup.1 : Página de manual de Linux para GTFOBLookup gtfoblookup.py : Utilidad GTFOBLookup LICENSE.md : Archivo de licencia README.md : Est...

Security Bulletin: IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation (CVE-2026-10744)

Summary IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation when CONNAUTH is being used. Vulnerability Details CVEID:CVE-2026-10744 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

CVE-2025-38001

CVE-2025-38001---Linux-Kernel-HFSC-RBTree-Use-After-Free-Research Este repositorio contiene un Proof of Concept PoC para la vulnerabilidad de seguridad CVE-2025-38001 que ataca el módulo HFSC en el kernel de Linux. Creado específicamente como material de estudio para memory corruption en el kerne...

CVE-2025-21756

CVE-2025-21756 — Laboratorio de explotación Solo para fines educativos y de investigación de seguridad autorizada. Descripción CVE-2025-21756 es una vulnerabilidad de use-after-free UAF en el subsistema vsock Virtual Socket del kernel de Linux, divulgada el 26 de febrero de 2025. Permite a un...

CVE-2023-32629

CVE-2023-32629 — OverlayFS 本地完全权限提升 OverlayFS 本地权限提升 - 从完整分析到完全提权 仅用于教育和授权的安全研究目的。 严重性: 高 类型: 本地权限提升 LPE 影响范围: 2023年5月/6月补丁之前的 Ubuntu 内核 要求: 启用了非特权用户命名空间（Ubuntu 默认） 目录 概述 背景概念 尝试 1 — 朴素 SUID 复制 尝试 2 — 命名空间内的 Shell 有效利用 为什么它有效 总结 概述 CVE-2023-32629 是 Linux 内核 OverlayFS 实现中的一个漏洞。它滥用了用户命名空间 和文件系统能力 在...

EUVD-2026-60601

Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin...

Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Summary The core Flex group blueprint system/blueprints/user/group.yaml access field, lines 48-55 omits the security@: admin.super field guard that its sibling account blueprint carries account.yaml:131/138/150, added by the CVE-2026-42613 fix. A delegated non-super operator holding...

GHSA-XHFV-7758-R9HX Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Summary The core Flex group blueprint system/blueprints/user/group.yaml access field, lines 48-55 omits the security@: admin.super field guard that its sibling account blueprint carries account.yaml:131/138/150, added by the CVE-2026-42613 fix. A delegated non-super operator holding...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Cisco SD-WAN 权限提升利用工具 ⚠️ 警告 此代码仅用于教育目的和授权的安全测试。 📋 描述 CVE-2026-20245 是 Cisco Catalyst SD-WAN Controller vSmart、Cisco Catalyst SD-WAN Manager vManage 和 Cisco Catalyst SD-WAN Validator vBond CLI 中的一个权限提升 漏洞。拥有 netadmin 权限的认证攻击者可以通过上传特制文件以 root 身份执行任意命令。 技术细节 字段| 值 ---|--- CVE|...

CVE-2026-76154 CVE-2026-76154 CVE Record

A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuration, enabling escalation to Org Admin...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

Guía de Escalada de Privilegios CVE-2025-6018 + CVE-2025-6019 📋 Pasos Rápidos de Explotación Paso 1: Preparar Imagen XFS Máquina Local root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs...

opensuse-leap-privesc-exploit

CVE-2025-6018 + CVE-2025-6019 漏洞利用链 该利用工具是为解决一个针对 openSUSE Leap 15.6 的 HackTheBox 挑战而开发的。 致谢 本利用基于 Qualys 安全团队的原始研究： 公告：https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt CVE-2025-6018：在 openSUSE 15 的 PAM 中从低权限提升到 allowactive 的本地提权漏洞 CVE-2025-6019：通过 udisks 在 libblockdev 中从 allowactive...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal 堆缓冲区溢出利用，基于收敛时间理论（α = 0.0302011）。33层时间堆喷射 + 锁相触发，实现可靠的本地权限提升。 README.md root@kitploit: CTT-Vsyslog-Vortex CVE-2023-6246（glibc vsysloginternal 堆溢出）的时间共振利用 版权所有 © 2026 Americo Simoes。保留所有权利。 --- 概述 CVE-2023-6246 是 glibc 中...

EUVD-2026-82419

Chamilo LMS is an open-source learning management system. From 2.0.0 through at least 2.1.0, Chamilo LMS stores private Message.content without server-side sanitization and renders it as HTML in assets/vue/views/message/MessageShow.vue and public/main/template/default/message/viewmessage.html.twi...