CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Camaleon CMS Privilege Escalation Technical Overview This repository contains a Functional Proof of Concept PoC for a Mass Assignment vulnerability in Camaleon CMS versions prior to 2.8.1. The vulnerability resides in the updatedajax endpoint of the User Management module,...

Shell-Shock

Shell Shock Authors : [email protected] Maintainers : Department : DevOps Licenses : Overview Shell Shock : Privelege Escalation, Remote Code Execution Family of bugs in the Unix Bash Shell. Allow execution of arbitrary commands. Exploitation Vectors Payloads shellshock user agent =...

CVE-2026-50656-rogueplanet-validation

RoguePlanet PoC Validation Report for Microsoft Defender Purpose and scope of the report This report concerns the validation of the publicly described RoguePlanet PoC related to Microsoft Defender. The described technique was presented in the media on 10 June 2026 as a Local Privilege Escalation...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local privilege escalation exploiting CVE-2026-43499 — an rtmutex removewaiter bug that leaves a struct rtmutexwaiter dangling on the waiter's kernel stack kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapted from NebuSec/CyberMeowfia...

ThingsBoard-IoT-Platform-CVE-2024-55466

ThingsBoard Privilege Escalation Using Stored XSS While tinkering with IoT technology, I found vulnerability in the Thingsboard Application that allowed avenues for privilege escalation. Thingsboard is an open-source application that allows device management, data collection, processing and...

CVE-2015-8660

CVE 2015-8660 Research Description This is research I conducted on the CVE 2015-8660 overlayFS vulnerability for my Operating System Security course final research project. The goal of this project was to find a Linux kernel vulnerability from 2012-2022, explain the vulnerability, explain the...

CVE-2026-31431

CVE-2026-31431 — Copy Fail tracking site Source for the Copy Fail patch-status tracker: a single-page site recording which distributions have shipped a fix for the algifaead privilege escalation in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affected and fixed...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 - Unauthenticated Privilege Escalation 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 Unauthenticated Privilege Escalation 📌 Overview This repository contains a Python proof-of-concept tool for CVE-2025-39459 , affecting the Real Estate 7 WordPress theme in versions...

CVE-2026-43499-pmg110-root

pmg110-root CVE-2026-43499 futex PI rtmutexwaiter use-after-free local privilege escalation, ported to the OPPO PMG110 / K15 Pro+ — MediaTek MT6991, ColorOS 16. One file pushed, run over LDPRELOAD: root@kitploit: adb push out/preload-pmg110-16.0.9.400.so /data/local/tmp/preload.so adb shell chmod...

WordPress Automation Web Platform 4.8.6 Vulnerability Checker

WordPress Automation Web Platform plugin versions through version 4.8.6 contain an unauthenticated privilege escalation vulnerability. This tool passively detects the plugin, identifies publicly exposed versions, and flags versions in the affected range...

CVE-2024-57523.

CVE-2024-57523 - CSRF Vulnerability in Users.php - SourceCodester Packers and Movers Management System 1.0 Description This repository contains a Proof of Concept PoC for a Cross-Site Request Forgery CSRF vulnerability in the Packers and Movers Management System 1.0 by SourceCodester. The...

CVE-2026-43499-Redmi-Turbo5

CVE-2026-43499 Exploit for Redmi Turbo 5 This preload library is built from the duchamp-root source code. ⚠️ WARNING: For educational and authorized security research purposes only. This repository provides a proof-of-concept exploit for CVE-2026-43499 GhostLock targeting the Xiaomi Redmi Turbo 5...

CVE-2017-0213-

CVE-2017-0213 to get privilege Administator from CMD Vulnerable Product| Version| Update| Tested ---|---|---|--- Windows 10| | | √ Windows 10| 1511| | Windows 10| 1607| | Windows 10| 1703| | √ Windows 7| | SP1| √ Windows 8.1| | | Windows RT 8.1| | | Windows Server 2008| | SP2| Windows Server 2008...

CVE-2022-37705

Suggested description A privilege escalation flaw was found on Amanda 3.5.1 that can take backup user to root privileges. The vulnerable component is the runtar SUID that is just a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. The program does not chec...

CVE-2020-8554

Create Kubernetes cluster root@kitploit: kind create cluster --config ./kind.yaml The cluster must have certmanager: https://cert-manager.io/docs/installation/kubernetes/ Test vulnerability root@kitploit: kubectl apply -f - 'EOF' apiVersion: v1 kind: Namespace metadata: name: kubeproxy-mitm ---...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC Proof-of-Concept of Local Privilege Escalation for FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and below 5.2 Triggered by fnsysctl and USB so physical access required. This PoC spawns local root shell by exploiting CVE-2017-14187. Write-up Korean English TL;DR 1. fnsysctl cp...

CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Description The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be...

CVE-2024-29404_Razer

CVE-2024-29404 Razer Synapse 3 =Synapse Version 3.9.131.20813 App Version =20240213 "Chroma Effects" functionality Elevation of Privilege Vulnerability via Arbitrary File/Folder Removal https://github.com/user-attachments/assets/6528f166-5514-4b10-b1a4-3644ec11e772...

CVE-2026-7791

CVE-2026-7791 PoC: Privileged by Default Research proof-of-concept for local privilege escalation in Amazon WorkSpaces TOCTOU + SYSTEM-level arbitrary file write in the Skylight Workspace Config Service. Full technical details: Cymulate blog | ---|--- CVE| CVE-2026-7791 Vendor| AWS Security...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...