CVE-2022-26923

CVE-2022-26923 As described by Tenable: Active Directory Domain Services Elevation of Privilege Vulnerability CVSS v3 Base score: 8.8 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity: High Summary: CVE-2022-26923 exploits a vulnerability in Microsoft Active Directory Certificate...

CVE-2025-25614

CVE-2025-25614 Incorrect Access Control in Unifiedtransform v2.0 leads to Privilege Escalation, allowing teachers to update the personal data of fellow teachers. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to the following endpoint: /teachers/edit/3...

CVE-2026-33825

🔵 CVE-2026-33825 — “BlueHammer” 🔵 Microsoft Defender Local Privilege Escalation LPE BlueHammer is a high-severity Local Privilege Escalation vulnerability affecting Microsoft Defender components on Windows systems. The flaw allows a low-privileged attacker to escalate privileges to NT...

dirty-pipe-poc

POC Exploit to add user to Sudo for CVE-2022-0847 Dirty Pipe Vulnerability This repo is based of the Vulnerability, Writeup and Exploit produced by Max Kellermann all found here. Just like everyone I had to take advantage of playing with the worlds most trivial to repro Priv Esc the blog post doe...

setcred

FreeBSD setcred2 — research artifacts This subdirectory collects the write-up and working exploits for the setcred2 stack buffer overflow in FreeBSD 14.x kernel. The vulnerability itself is fully documented in setcred.txt. The short version: kernsetcredcopyinsuppgroups uses sizeofgroups where...

CVE-2026-29000-PoC-Exploit

🚀 CVE-2026-29000 - pac4j-jwt Authentication Bypass Exploit CVE-2026-29000 - One-Click Admin Forge via JWT alg:none + JWE Encryption 📌 Overview This exploit weaponizes CVE-2026-29000 , a critical CVSS 10.0 vulnerability in the pac4j-jwt library. By extracting the server's public JWKS key and...

HVCIPwned

CVE-2024-35250 Local privilege escalation via untrusted pointer dereference in Windows Kernel Streaming driver ks.sys. Data-only exploit — bypasses Hypervisor-protected Code Integrity HVCI. Summary Field| Detail ---|--- CVE| CVE-2024-35250 Component| ks.sys Kernel Streaming Bug Class| Untrusted...

CVE-2025-6018-6019-PoC

CVE-2025-6018 y CVE-2025-6019: PoC de Escalada de Privilegios Local Un robusto Proof of Concept PoC para encadenar CVE-2025-6018 bypass de sesión activa de PAM/Polkit y CVE-2025-6019 fallo de montaje SUID en libblockdev para lograr acceso root en sistemas Linux vulnerables. Aviso legal Esta...

CVE-2021-29337

CVE-2021-29337 - Privilege Escalation in MODAPI.sys MSI Dragon Center General Affected Product: MSI Dragon Center Affected Version: 2.0.104.0 CVE MITRE Description A vulnerable kernel driver MODAPI.sys in dragon center exposes IOCTL 0x9C406104 which allows low-privileged users to interact directl...

copyfail-guard

copyfail-guard Automated detection and mitigation tool for the vulnerability CVE-2026-31431 "Copy Fail", a local privilege escalation LPE in the algifaead module AFALG interface of the Linux kernel. ⚠️ Scope: this project is purely defensive. It does not contain, generate, or reference exploit...

CVE-2023-27326

Escape de máquina virtual de Parallels Desktop Este repositorio contiene un exploit para una vulnerabilidad de Parallels Desktop a la que se le ha asignado el CVE-2023-27326. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de Parallels Desktop. El...

CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" This repo is a bad Epoll validator for aarch64 kernels based on exploit already exists for x86. Linux Kernel Local Privilege Escalation viaepoll Use-After-Free Race Condition Field| Detail ---|--- CVE| CVE-2026-46242 Nickname| Bad Epoll Type| Use-After-Free UAF via ra...

CVE-2025-27591

CVE-2025-27591 descripción Básicamente, la herramienta below permite la modificación universal de su archivo de registro, lo que conduce a una escalada de privilegios como root. detalles. El archivo de registro creado por below es escribible por cualquier usuario, permitiendo a cualquier usuario...

CVE-2022-32250-LPE

CVE-2022-32250-LPE LPE exploit for CVE-2022-32250 - a Use-After-Free vulnerability in netfilter. My write-up of the vulnerability: Conquering a Use-After-Free in nftables: Detailed Analysis and Exploitation of CVE-2022-32250 Building Building requires libmnl and libnftnl. gcc -lmnl -lnftnl...

CVE-2025-32463-sudo-chwoot

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability Original PoC sudo-chwoot.sh CTF Demo chwoot-demo.c Docs Write-up: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Advisory:...

PHP-CVE-2023-2023-2640-POC-Escalation

I am not responsible if you use the code improperly or illegally. The purpose of the script is purely educational and nothing more. PHP-CVE-2023-2023-2640-POC-Escalation in this script in PHP I tried to create exploit of --cve-2023-2640--privilege-escalation CVE-2023-32629 & CVE-2023-2640...

yc-mk8s-sctphantom-mitigation

SCTPhantom Mitigation for Yandex Managed Kubernetes Automatic application of mitigation for the CVE-2026-64564 SCTPhantom vulnerability in the Linux kernel on all worker nodes of a Yandex Managed Kubernetes cluster. Vulnerability Description CVE identifier CVE ID: CVE-2026-64564 CVE link:...

CVE-2022-37706

CVE-2022-37706 Resumen CVE-2022-37706 es una vulnerabilidad de Escalada Local de Privilegios LPE encontrada en el componente enlightenmentsys del entorno de escritorio Enlightenment para Linux. Esta vulnerabilidad permite que un usuario local con bajos privilegios eleve sus privilegios a root en...

CVE-2025-8110-gogs-poc

CVE-2025-8110 — Gogs Arbitrary File Write PoC Proof-of-concept for an authenticated arbitrary file write in Gogs. By pushing a repository that contains a symbolic link pointing outside the repo and then updating that link's contents through the API, an authenticated user can overwrite files on th...

pagecache-lpe-containment-kit

Page-Cache LPE Containment Kit Detect, contain, and verify defenses against two Linux page-cache-corruption local privilege escalations — DirtyClone CVE-2026-43503 and pedit COW CVE-2026-46331 — on hosts and containers. This is an educational, defensive security kit. It explains how both...