CVE-2023-27326

Escape de máquina virtual de Parallels Desktop Este repositorio contiene un exploit para una vulnerabilidad de Parallels Desktop a la que se le ha asignado el CVE-2023-27326. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de Parallels Desktop. El...

CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" This repo is a bad Epoll validator for aarch64 kernels based on exploit already exists for x86. Linux Kernel Local Privilege Escalation viaepoll Use-After-Free Race Condition Field| Detail ---|--- CVE| CVE-2026-46242 Nickname| Bad Epoll Type| Use-After-Free UAF via ra...

CVE-2025-27591

CVE-2025-27591 descripción Básicamente, la herramienta below permite la modificación universal de su archivo de registro, lo que conduce a una escalada de privilegios como root. detalles. El archivo de registro creado por below es escribible por cualquier usuario, permitiendo a cualquier usuario...

CVE-2022-32250-LPE

CVE-2022-32250-LPE LPE exploit for CVE-2022-32250 - a Use-After-Free vulnerability in netfilter. My write-up of the vulnerability: Conquering a Use-After-Free in nftables: Detailed Analysis and Exploitation of CVE-2022-32250 Building Building requires libmnl and libnftnl. gcc -lmnl -lnftnl...

CVE-2025-32463-sudo-chwoot

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability Original PoC sudo-chwoot.sh CTF Demo chwoot-demo.c Docs Write-up: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Advisory:...

PHP-CVE-2023-2023-2640-POC-Escalation

I am not responsible if you use the code improperly or illegally. The purpose of the script is purely educational and nothing more. PHP-CVE-2023-2023-2640-POC-Escalation in this script in PHP I tried to create exploit of --cve-2023-2640--privilege-escalation CVE-2023-32629 & CVE-2023-2640...

yc-mk8s-sctphantom-mitigation

SCTPhantom Mitigation for Yandex Managed Kubernetes Automatic application of mitigation for the CVE-2026-64564 SCTPhantom vulnerability in the Linux kernel on all worker nodes of a Yandex Managed Kubernetes cluster. Vulnerability Description CVE identifier CVE ID: CVE-2026-64564 CVE link:...

CVE-2022-37706

CVE-2022-37706 Overview CVE-2022-37706 is a Local Privilege Escalation LPE vulnerability found in the enlightenmentsys component of the Enlightenment desktop environment for Linux. This vulnerability allows a local low-privileged user to escalate privileges to root on vulnerable systems. CVE ID:...

CVE-2025-8110-gogs-poc

CVE-2025-8110 — Gogs Arbitrary File Write PoC Proof-of-concept for an authenticated arbitrary file write in Gogs. By pushing a repository that contains a symbolic link pointing outside the repo and then updating that link's contents through the API, an authenticated user can overwrite files on th...

pagecache-lpe-containment-kit

Page-Cache LPE Containment Kit Detect, contain, and verify defenses against two Linux page-cache-corruption local privilege escalations — DirtyClone CVE-2026-43503 and pedit COW CVE-2026-46331 — on hosts and containers. This is an educational, defensive security kit. It explains how both...

CVE-2020-25769

GOG Galaxy Local Privilege Escalation - CVE-2020-25769 GOG Galaxy 2.0 es una plataforma desarrollada por CD Project diseñada como tienda, entrega de software, red social y como un lanzador de juegos unificado. En Windows, el cliente depende del componente GalaxyClientService para manejar tareas...

CVE-2021-3560-Polkit-Privilege-Esclation

CVE-2021-3560-Polkit-Privilege-Esclation PoC Original research by Kevin Backhouse This is just a Bash PoC script, that automates the exploitation steps mentioned in Kevin Backhouse's blog. Read his post on this vulnerability:...

CVE-2021-1366

CVE-2021-1366 Cisco AnyConnect Posture HostScan Local Privilege Escalation: CVE-2021-1366 A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an...

CVE-2026-31694-POC

CVE-2026-31694: Desbordamiento de escritura en caché de readdir de FUSE Una verificación de límites faltante en fs/fuse/readdir.c:fuseadddirenttocache. Un servidor FUSE devuelve una entrada de directorio con namelen = 4095, que se serializa en un registro de 4120 bytes. El kernel lo copia en una...

CVE-2022-38604

Exploits para CVE-2022-38604 FilesystemEoPs es una copia de este repositorio con la adición de los proyectos compilados para x64. Aquí puedes encontrar mi informe sobre la Vulnerabilidad de Eliminación Arbitraria de Archivos. Aquí puedes entender cómo usar una primitiva de Eliminación Arbitraria ...

cve-2020-1472_Tool-collection

Introduction article https://www.yuque.com/shamo-vs4ia/vul/ktduf8 Environmental preparation pip3 install -r requirements.txt Vulnerability detection python3 zerologontester.py ad adip Exploit python CVE-2020-1472.py AD AD$ adip secretsdump.py -hashes :31d6cfe0d16ae931b73c59d7e0c089c0...

CVE-2023-2877

CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Usage usage: CVE-2023-2877.py -h -w URL -u USERNAME -p PASSWORD -pl PLUGIN -c CMD CVE-2023-2877 - Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Script options: -h, --help show this help message and exit -w URL,...

CVE-2026-52943

How to use this repo This is a Linux Kernel Local Privilege Escalation PoC code for a use-after-free in skbuff.c : https://github.com/torvalds/linux/commit/98d0912e9f841e5529a5b89a972805f34cb1c69d vidieo1.webm here is the writeup link: https://hackmd.io/@mlc0cVjxSwqv0OoxsUYccw/Bk99YYTyzx you need...

CVE-2026-31431-copy-fail

CVE-2026-31431 Copy Fail Exploit Part 1: Theoretical Concept How CVE-2026-31431 Works Instead of the system constantly fetching files directly from the slow physical hard disk—which wastes a lot of time the Linux system creates a temporary copy of the file inside RAM, known as the Page Cache. Thi...

nosqli-flintcms

nosqli-flintcms Laboratorio de estudio de caso de inyección noSQL ciega basado en CVE-2018-3783 escalada de privilegios en flintcms 1.1.9. La vulnerabilidad fue descubierta originalmente por Benoit Côté-Jodoin. Puedes leer el informe original en HackerOne. Prerrequisitos docker-compose Limitación...