privilege-escalation-breach

セキュリティ侵害プロジェクト - 権限昇格 この脆弱性は、Oracle Systems の製品である Oracle Solaris コンポーネント: XScreenSaver に存在します。影響を受けるサポート対象バージョンは 11 です。これは容易に悪用可能な脆弱性であり、Oracle Solaris が実行されるインフラストラクチャにログオンできる低権限の攻撃者が Oracle Solaris を侵害することを可能にします。脆弱性は Oracle Solaris にありますが、攻撃は追加の製品に重大な影響を与える可能性があります。この脆弱性の攻撃が成功すると、Oracle Solar...

Privilege-Escalation-CVE-2019-13272-

Privilege-Escalation-CVE-2019-13272- This repository contains a report of Privilege Escalation vulnerability CVE-2019-13272...

EUVD-2026-58646

Grav: Stored XSS via quoted-attribute bypass in detectXss...

OverlayFS-LPE-Exploit

OverlayFS-LPE-Exploit OverlayFS Local Privilege Escalation CVE-2021-3493 Project Overview This repository contains documentation and exploit code for a Local Privilege Escalation LPE vulnerability found in the Ubuntu Linux kernel. This was tested in a TryHackMe lab environment. Lab Highlights...

HTB-Facts-Writeup

HackTheBox — Facts Machine Writeup Machine Info Field| Details ---|--- Name| Facts OS| Linux Difficulty| Easy Release| Season 10 Retired| No Attack Chain Overview root@kitploit: Recon → Web Enumeration → CVE-2025-2304 Mass Assignment → S3/MinIO Credential Leak → SSH Key Extraction → Passphrase...

CVE-2025-13390

CVE-2025-13390 WP Directory Kit WordPress 的 WP Directory Kit 插件在所有版本（包括 1.4.4）中均存在认证绕过漏洞，原因是wdkgenerateautologinlink 函数中的认证算法实现不正确。 该漏洞源于使用了密码学上弱的令牌生成机制。这使 未认证攻击者 能够通过可预测的令牌，利用自动登录端点获得管理员访问权限，并 完全接管网站 。 CNA： Wordfence 基础评分： 10.0 严重 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H ⚡ 漏洞利用特点 Cookie...

CVE-2025-14998

Wordpress Branda – White Label & Branding, Free Login Page Customizer getrow $w...

CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration 🔴 Vulnerability Overview CVE-2026-1492 — Unauthenticated Privilege Escalation via Membership Registration Description: The User Registration & Membership plugin for WordPress is...

CVE-2026-24291

🔓 权限提升绕过工具 v2026 为高级 Windows 工作流打造的简化权限提升方案 🧠 概念概述 本工具专为高级用户设计，帮助他们无需反复手动认证即可顺畅提升系统权限。 可以将其视为 Windows 用户账户控制的数字万能钥匙 ——它自动完成“是”的点击，让脚本、 批处理文件和旧版应用程序能够无缝地以管理员权限运行。与传统方法不同，我们的解决方案 采用零接触架构 ，在尊重系统安全边界的同时消除工作流中断。 🎯 核心理念 “提权应当是一个事件，而不是一个障碍。” 传统的 UAC 提示就像每扇门前的保安——我们的方法则是一张 VIP 通行证，让你在不打乱自动化节奏的情况下顺利通过。 🚀...

cve-2026-0013-exploit

This repository does not have a README...

CVE-2026-4484

CVE-2026-4484 Masteriyo LMS = 2.1.6 - Missing Authorization to Authenticated Student+ Privilege Escalation to Administrator 🔴 Vulnerability Overview CVE-2026-4484 — Authenticated Privilege Escalation Student → Administrator Description: The Masteriyo LMS plugin for WordPress is vulnerable to...

CVE-2026-92033

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in Firefox for Android...

Binary-Exploitation-and-Kernel-Escalation

Binary-Exploitation-and-Kernel-Escalation Secured root-level access by identifying and exploiting misconfigurations and outdated software. Buffer overflow vulnerability in an outdated version of modssl CVE-2002-0082. Privilege escalation was subsequently achieved by exploiting a race condition in...

CVE-2026-92055

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DevTools component...

CVE-2026-92054

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Memory component...

CVE-2015-5287

CVE-2015-5287 RHEL 7.0/7.1 - 'abrt/sosreport' 本地权限提升 捐赠 帮助维护此项目 如果您觉得此项目有用，请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 您每笔捐赠的百分之十将捐献给甘塔博帕儿童医院。 | 选择支付方式 使用 ABA Mobile 扫描 · 点击放大 ---|--- ⚡ 简单用法 直接从 GitHub 运行最新版本的外部下载脚本： root@kitploit:...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 Local Privilege Escalation PoC Overview This project is an educational proof-of-concept for a Local Privilege Escalation LPE vulnerability in the driver iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 — the Intel...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESRi MFSA 2026-93, bsc1280371 CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the...

SUSE-SU-2026:4247-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESRi MFSA 2026-93, bsc1280371 - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the...

google-osconfig-privesc

Summary googleosconfigagent 进程是 GoogleCloudPlatform https://github.com/GoogleCloudPlatform/osconfig 工具的一个组件， 默认运行在每个 VM 上。该代理以 root 身份运行，并负责一些用户可控制的服务， 包括 OS config https://cloud.google.com/compute/docs/os-config-management，这有点像 Google 的基于轮询的期望状态 配置实现。 本仓库托管了一个关于我在该实现中发现的一个权限提升缺陷的演示（该缺陷后来已被 Googl...