317297 matches found
Gombruc
Gombruc escalada de privilegios para linux todas las versiones Esta vulnerabilidad estรก relacionada con CVE-2025-0401, que afecta a todos los sistemas Linux. Con la ayuda de este script bash, puedes dar a tu usuario cualquier nivel de acceso, hasta e incluyendo acceso Root. Advertencia: Este...
CVE-2025-5701
CVE-2025-5701 HyperComments = 1.2.2 - Unauthenticated Subscriber+ Arbitrary Options Update Description The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function...
Research-CVE-2023-27524
Research-CVE-2023-27524 El concurso de estudiantes de seguridad de la informaciรณn de la ASEAN ha terminado temporalmente; mi equipo MSECHUNT3R ganรณ el segundo premio en la categorรญa Jeopardy. Mi estado de รกnimo es agridulce porque el apartado web de este aรฑo no cumpliรณ mis expectativas, pero buen...
OverlayFS-PrivEsc-CVE-2022-0944
CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS ๐ก๏ธ Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. ๐ Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers...
Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074
Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074...
Elevator
Description Elevator allows to bypass the UAC and spawn an elevated process with full administrator privileges. This is done by abusing the behaviour of the RPC server that implements the UAC feature, as demonstrated by James Forshaw in his article Calling Local Windows RPC Servers from .NET. The...
DirtyCred
DirtyCred: Escalating Privilege in Linux Kernel DirtyCred is a kernel exploitation concept that swaps unprivileged kernel credentials with privileged ones to escalate privilege. Instead of overwriting any critical data fields on kernel heap, DirtyCred abuses the heap memory reuse mechanism to get...
CVE-2021-4034
Proof of Concept PoC: CVE-2021-4034 PwnKit Note: This repository and its content are part of a Final Degree Project FDP, created solely for educational purposes and academic research. Description This repository contains a proof of concept PoC for the CVE-2021-4034 vulnerability, also known as...
CVE-2023-32233
CVE-2023-32233 Adaptaciรณn para kernel 5.x EXP existentes 1. https://github.com/Liuk3r/CVE-2023-32233/tree/main 2. https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-32233mitigation Razรณn Debido a que en las versiones de kernel anteriores listdelrcu. Mรฉtodo Este...
CVE-2025-65094
CVE-2025-65094: WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation IDOR Overview Field| Details ---|--- CVE ID| CVE-2025-65094 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products WBCE/WBCECMS Details Summary A low-privileged user in WBCE CMS...
CVE-2025-52289
CVE-2025-52289: Control de Acceso Roto en MagnusBilling v7.8.5.3 Descripciรณn Existe una vulnerabilidad de Control de Acceso Roto en MagnusBilling en versiones anteriores a v7.8.5.3. Los usuarios reciรฉn registrados pueden escalar el estado de su cuenta de pending a active sin la aprobaciรณn del...
CVE-2026-19598
๐จ CVE-2026-19598 https://plugins.trac.wordpress.org/browser/pods/tags/3.3.9/includes/general.phpL400 The Pods โ Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists...
CVE-2021-3156
CVE-2021-3156 PoC de shell root para CVE-2021-3156 sin fuerza bruta Con fines educativos, etc. Probado en Ubuntu 20.04 contra sudo 1.8.31 Todo el crรฉdito de la investigaciรณn: Qualys Research Team Consulta los detalles en su blog. Puedes comprobar si tu versiรณn de sudo es vulnerable con: $ sudoedi...
CVE-2025-6934
CVE-2025-6934 ๐ก๏ธ CVE-2025-6934 - Unauthenticated Privilege Escalation in Opal Estate Pro ๐ Description The Opal Estate Pro โ Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to Privilege Escalation in all version...
CVE-2024-27673
CVE-2024-27673 ASUS Control Center Express = 01.06.15 - Unquoted Service Path Description: ASUS Control Center Express Version = 01.06.15 contains an unquoted service path which allows attackers to escalate privileges to the system level. Assuming attackers have write access to C:, the attackers...
CVE-2023-6000-POC
General Details CVE-ID : CVE-2023-6000 CVSS Score : 6.1 Type : Stored XSS Fixed Version : Popup Builder 4.2.3 This vulnerability allows an attacker to exploit a Cross-Site Scripting XSS flaw in the WordPress Popup Builder plugin. The plugin fails to prevent regular visitors from modifying existin...
YellowKey-Bitlocker-CVE-2026-45585
๐ก๏ธ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely ๐ What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...
CVE-2024-2771-PoC
CVE-2024-2771-PoC CVE-2024-2771 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all...
oppo-pgem10-ghostlock
OPPO Find X6 Pro GhostLock Adaptation Project Overview This project conducts adaptation research for the CVE-2026-43499 GhostLock vulnerability on the OPPO Find X6 Pro PGEM10. Based on the original exploit architecture from NebuSec CyberMeowfia, referencing adaptation ideas from oppo-ghostlock...
CVE-2021-3156
CVE-2021-3156 Introduction This repository was created for studying purpose. The project contains some tools for studying the sudo Baron Samedit vulnerability and the exploit for it. Thanks to Qualys Team for discovering such vulnerability, to Worawit and 0xdevil for the interesting writeups. Usa...