CVE-2024-25081_2025-47273

CVE-2024-25081 y CVE-2025-47273 Prueba de concepto FontForge versión ≤ 20230101 y librería Setuptools versión Prueba de concepto para elevar los privilegios al usuario que ejecuta una tarea que utiliza Font Forge. El segundo CVE eleva los privilegios a root, siempre que tengas permisos de escritu...

dirtycow.cr

dirtycow CVE-2016-5195 exploit Installation Go to the release section or use your crystal environment. Usage root@kitploit: dirtycow --target /path/to/root/file --string "string to write" --offset...

CVE-2018-18955

CVE-2018-18955 Exploit local de root en Linux. Wrapper para el exploit de Jann Horn para CVE-2018-18955, bifurcado de kernel-exploits. En el kernel de Linux 4.15.x a 4.19.x antes de 4.19.2, mapwrite en kernel/usernamespace.c permite escalada de privilegios porque maneja incorrectamente espacios d...

CVE-2019-2215

CVE-2019-2215 Temproot for Bravia TV via CVE-2019-2215. Overview Demonstration of a kernel memory R/W-only privilege escalation attack resulting in a temporary root shell. It works on Sony Bravia TV devices running the Android 8 PKG6.0724 firmware with kernel version 4.9.51. For this tool to work...

CVE-2022-38577-Processmaker

This repository has be archived and moved to: https://github.com/sornram9254/CVE-BBP-VDP ProcessMaker - User Profile Privilege Escalation CVE-2022-38577 ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to...

CVE-2023-4911

CVE-2023-4911-Looney-Tunables Looney Tunables Local privilege escalation CVE-2023-4911 workshop for educational purposes only Links: IPPSEC video Qualsys Blog Post Qualsys Tech Details Exploit POC python script GLIBC sources GLIBC tunables documentation Description What is ld.so? In computing, a...

CVE-2025-60709

🚨 EXPLOIT PoC — FOR SECURITY RESEARCH, VULNERABILITY ANALYSIS AND DEFENSIVE PURPOSES ONLY 🚨 PoC DE EXPLOIT — SOLO PARA INVESTIGACIÓN DE SEGURIDAD, ANÁLISIS DE VULNERABILIDADES Y FINES DEFENSIVOS 🌐 Idiomas / Languages 🇪🇸 Español 🇬🇧 English 🇪🇸 Documentación en Español Descripción CVE-2025-60709 es...

CVE-2020-1034

CVE-2020-1034 Warning This repository contains a working exploit. Publication was made for educational purposes only. Owner of this repository is not responsible for any damage done by any part of source code published here. This repository was created as a homework for "Protected Information...

CVE-2026-85885

Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...

CVE-2026-85889

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85917

Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-87701

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network...

CVE-2026-87886

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.9.3.1021, Acronis Backup extension for Plesk Linux before build 1.8.11.638, Acronis Backup plugin for DirectAdmin Linux before build...

CVE-2026-83944

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70200

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70009

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 - Unauthenticated Privilege Escalation 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 Unauthenticated Privilege Escalation 📌 Overview This repository contains a Python proof-of-concept tool for CVE-2025-39459 , affecting the Real Estate 7 WordPress theme in versions...

CVE-2026-69843

Microsoft Fabric is affected by an authentication bypass by spoofing vulnerability that allows an unauthorized, unauthenticated attacker to elevate privileges over a network. The flaw carries a CVSS 3.1 score of 10.0 (Critical) with a changed scope and high impact to confidentiality, integrity, a...

CVE-2026-85878

CVE-2026-85878 is an improper authorization vulnerability in Azure Database for PostgreSQL that allows an authorized attacker to elevate privileges over a network. Microsoft's CNA rates it CVSS 3.1 9.9 (CRITICAL) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a low-complexity ne...

CVE-2026-62874

Azure Billing is affected by an elevation of privilege vulnerability caused by insufficient verification of data authenticity , allowing an unauthorized attacker to elevate privileges over a network with no prior access or user interaction. The vulnerability is rated CRITICAL (CVSS 3.1: 10.0) wit...