CVE-2012-0056

CVE-2012-0056 Mempodipper, un exploit de escalada de privilegios local de Linux. Clonar desde http://git.zx2c4.com/CVE-2012-0056 ssh://[email protected]/CVE-2012-0056...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Información básica ID de vulnerabilidad: CVE-2023-22809 Nivel de vulnerabilidad: Alto Puntuación de vulnerabilidad: 7.8 puntos Versiones afectadas: sudo 1.8.0-sudo 1.9.12p1sudo=1.8.0 or sudo =1.9.12p1 Efecto del ataque: Escalada de privilegios local Método de...

copyfail-fix

CopyFail-Fix 🌐 English | Português | Español | 中文 | Íslenska One-command mitigation and patch for CVE-2026-31431 — the Linux kernel "Copy Fail" local privilege escalation vulnerability. The script disables the affected algifaead module, upgrades your kernel via apt, and optionally installs a...

CVE-2026-81294

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-81294 CVE-2026-81294 — WordPress WordPress — Authorizer 3.15.1 — Paul Ryan Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions. | ---|--- CVE| CVE-2026-81294 · CVE.org CWE| CWE-266 CVSS| Critical: 9.8...

CVE-2025-2304_POC

CVE-2025-2304POC CVE-2025-2304 POC - Escalada de Privilegios en Camaleon CMS Este POC se utiliza para explotar los privilegios de Camaleon CMS y obtener privilegios de administrador. El exploit funciona inyectando el rol en la función de restablecimiento de contraseña de un usuario autenticado...

defender-privilege-escalation-scanner

Defender Vulnerability Scanner Microsoft Defender vulnerability scanner — CVE-2026-41091 / CVE-2026-45498 Detects security weaknesses in Microsoft Defender deployments. For authorized security testing only. Features CVE-2026-41091 detection CVE-2026-45498 detection Microsoft Defender posture...

CVE-2025-13486

CVE-2025-13486 explotación Plugin ACF Extended para WordPress — Ejecución Remota de Código y Escalada de Privilegios Explotación de la CVE-2025-13486 descubierta por Marcin Dudek dudekmar ⚠️ Aviso legal Este repositorio se proporciona únicamente con fines de investigación y seguridad defensiva. El...

CVE-2025-6018-and-CVE-2025-6019

Check Its Vulnerable or not root@kitploit: rpm -q pam || dpkg -l | grep libpam or find /etc/pam.d/ -name '' -exec grep -l 'pamenv' \; 2/dev/null or find /etc/pam.d/ -name '' -exec grep -l 'pamsystemd' \; 2/dev/null or systemctl --version | head -1 If version Include :Vulnerable PAM version...

CVE-2022-0185-Analysis-and-Exploit

CVE-2022-0185-Analysis-and-Exploit Research and proof-of-concept for CVE-2022-0185 Linux kernel heap overflow vulnerability. CVE-2022-0185 – Linux Kernel Heap Overflow Analysis Overview CVE-2022-0185 is a heap-based buffer overflow vulnerability in the Linux kernel’s filesystem context...

CVE-2025-13486

🔴 CVE-2025-13486 - Exploit del Plugin de WordPress Advanced Custom Fields Extended ACFE 📋 Resumen Exploit de prueba de concepto para CVE-2025-13486 , una vulnerabilidad crítica en el plugin de WordPress Advanced Custom Fields: Extended ACFE que permite la Ejecución Remota de Código que conduce a ...

metasploitable3-pentest-writeup

Metasploitable3 — Penetration Test Report Author: Arlen Fortunato Date: September 2026 Environment: Parrot OS attacker → Metasploitable3 Ubuntu 14.04 target Scope: Full network penetration test — enumeration, exploitation, privesc, post-exploitation Type: Home Lab / Capture The Flag Practice ⚠️ Al...

Dirty-Pipe-Exploits

CVE-2022-0847 Exploits Dirty Pipe What is it ? Disclosed on March 7, 2022 by Max Kellerman2, CVE-2022-0847 is a vulnerability in the Linux kernel versions 5.8 to 5.16.11 that allows attackers to overwrite read-only or immutable files and escalate their privileges on the victim's system...

CVE-2016-7255

CVE-2016-7255 Proof Of Concept privilege escalation exploit using CVE-2016-7255, aims to mirror the functionality of the exploit found in the wild as described by Trend Micro. You may want to fix the recovery before using this anywhere important. Some code taken from tinysec's original crash PoC...

CVE-2024-48990

CVE-2024-48990 — needrestart Escalada de Privilegios Local Exploit de escalada de privilegios local que apunta a needrestart /environ, incluido PYTHONPATH. Un usuario local sin privilegios puede explotar esto: 1. Estableciendo PYTHONPATH en un directorio que contenga un paquete malicioso importli...

CVE-2025-32463

Vulnerable: sudo 1.9.14 to 1.9.17 Patched: sudo 1.9.17p1 and later Exploit root@kitploit: git clone https://github.com/kh4sh3i/CVE-2025-32463.git cd CVE-2025-32463 chmod +x exploit.sh id ./exploit.sh id...

cve-2024-1086-lpe

cve-2024-1086-lpe Análisis técnico y prueba de concepto para CVE-2024-1086, una vulnerabilidad use-after-free en nftables del kernel de Linux que provoca escalación de privilegios local. Incluye desglose de la vulnerabilidad, versiones afectadas, metodología de explotación y guía de mitigación co...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automation of the exploitation of CVE-2022-26923 Certifried allowing privilege escalation via abuse of Active Directory Certificate Services AD CS and Resource-Based Constrained Delegation RBCD, leading to the dump of the NTLM hash of a domain...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

CVE-2026-3584

CVE-2026-3584 – WordPress Kali Forms = 2.4.9 - Unauthenticated Remote Code Execution via formprocess 🔥 Vulnerability Summary The WordPress Kali Forms plugin versions = 2.4.9 contain a critical unauthenticated remote code execution RCE vulnerability. This flaw allows unauthenticated attackers to...

CVE-2022-24637

Vulnerable Application Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with ' and get IPAddress, e.g 172.22.0.2 Database...