296497 matches found
CVE-2018-8120
CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Tested support: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32, Win2003 x64 The original exp does not support xp, 2003. This code adds support for these two systems based on...
CVE-2023-22515-Exploit-Script
Automated Exploitation of CVE-2023-22515 - Confluence Privilege Escalation This repository contains an automated exploit script for CVE-2023-22515, a critical vulnerability in Atlassian Confluence that allows unauthorized attackers to create administrative accounts and gain full control of...
uptux
uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...
Detection-Tool-Kit-for-CVE-2026-31431
copyfail-detect Detection toolkit for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation technique that corrupts page-cache data without changing the file on disk. Why This Exists Copy Fail can bypass traditional file integrity monitoring because the on-disk file is not modifie...
CVE-2022-22296
CVE-2022-22296 All Details about CVE-2022-22296 Software: Hospital's Patient Records Management System 1.0 Software Link: https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html Vulnerability Type: Insecure Permissions - IDOR Affected...
CVE-2022-39959
CVE-2022-39959 Affected Vendor- Panini https://www.panini.com/en Affected Product - Panini Everest Engine Affected Version - 2.0.4 There is an Unquoted Service Path in Everest EngineEverestEngine.exe in version 2.0.4 on Windows. This allows an unauthorized local user to insert arbitrary code into...
CVE-2020-24030
CVE-2020-24030 Description ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and to access sensitive data via token reuse. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...
CVE-2025-2563
CVE-2025-2563 User Registration & Membership = 4.1.1 - Unauthenticated Privilege Escalation Disclaimer! The information presented in this CVE Common Vulnerabilities and Exposures writeup is for educational and informational purposes only. The details provided are based on publicly available...
CVE-2020-24029
CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...
CVE-2020-24028
CVE-2020-24028 Description ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Insecu...
CVE-2022-0847-L-nux-PrivEsc
CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. - create by antx at 2022-03-08. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later...
CVE-2025-32462-32463-Detection-Script-
CVE-2025-32462-32463-Detection-Script- Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros A brief description of the vulnerabilities is below - root@kitploit: CVE-2025-32462 CVSS score: 2.8 - Sudo before 1.9.17p1, when used with a sudoers file that...
ivanti-cve-2023-35080-privilege-escalation-bof
Ivanti Connect Secure VPN Privilege Escalation Ivanti Secure Access previously Pulse Secure privilege escalation Cobalt Strike BOF CVE-2023-35080. Exploit by Alex and BOF by Tijme. Made possible by Northwave Cyber Security Description This is a Cobalt Strike CS Beacon Object File BOF and executab...
CVE-2016-5195
CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w proof of concept for Android This repository demonstrates the vulnerability on vulnerable Android devices attached via ADB. It does not disable SELinux see https://github.com/timwr/CVE-2016-5195/issues/9 or install superuser on the device...
CVE-2024-50379
CVE-2024-50379 CVE-2024-50379 is a critical security vulnerability affecting Apache Tomcat, allowing attackers to exploit misconfigurations or weaknesses to achieve remote code execution RCE. When exploited, this vulnerability can lead to server compromise, data leakage, or privilege escalation...
CVE-2017-14105
Aerohive HiveManager Classic Privilege Escalation Vulnerability Name Aerohive HiveManager Classic Privilege Escalation Vulnerability Systems Affected HiveManager Classic 8.0r1 8.1r1 Severity Medium 6.6/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:H/RC:C Vendor http://www.aerohive.com/...
cve-2023-1874
CVE-2023-1874 Disclaimer THIS SCRIPT IS DESIGNED FOR WHITE HAT AND EDUCATIONAL PURPOSES ONLY. ANY USE OF THIS AGAINST A DEVICE YOU ARE NOT AUTHORIZED TO TEST ON OR DO NOT OWN IS YOUR OWN RESPONSIBILITY. THE AUTHOR OF THIS SCRIPT TAKES NO RESPONSIBILITY FOR ANYTHING YOU DO WITH THIS SCRIPT. YOUR...
CVE-2025-49132-Pterodactyl-Panel-RCE
CVE-2025-49132 — Pterodactyl Panel Security Research & Educational Analysis Overview This project documents research related to CVE-2025-49132 , a vulnerability affecting the Pterodactyl Panel. Purpose: Security research, education, defensive awareness Use only in controlled environments Does not...
SUID3NUM
SUID3NUM A standalone python2/3 script which utilizes python's built-in modules to find SUID bins, separate default bins from custom bins, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ͡ʘ ͜ʖ ͡ʘ Description A standalone script supporting both python2 &...