VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC

VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC This is my malware. I use the CVE 2023-38831, a kind of exploit on WinRAR, to do this malware. I also use BypassUAC to get Administrator authority. This is the OVA file of it:...

CVE-2023-1829

CVE-2023-1829 The exploitation is tested on Ubuntu22.04 official source code 5.15.0-25.25 Installing dependences for some netlink filter functions sudo apt install libnftnl-dev libmnl-dev Building step: make References https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/main...

CVE-2025-29471

Stored XSS Vulnerability in Nagios Log Server Privilege Escalation to Admin ▶️ PoC Demo Date: 2025-04-02 Exploit Author: Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – Baron Samedit Heap-Based Buffer Overflow in sudo | Exploitation & Mitigation Analysis Overview CVE-2021-3156, known as Baron Samedit , is a heap-based buffer overflow vulnerability in the sudo program. It allows any unprivileged local user to gain root privileges on vulnerable...

gameoverlay

Gameoverlay shell code for privilege escalation root on UBUNTU. Ubuntu: 23.04 22.10 22.04 not v5.15.0 20.04 v.5.4.0 for 32629 18.04 v.5.4.0 for 32629 run with ./overlay.sh...

CVE-2020-5752

CVE-2020-5752: Druva inSync Local Privilege Escalation A C-based exploit for the Druva inSync Windows Client v6.6.3 and below. The application exposes an RPC service on port 6064 that is vulnerable to command injection via path traversal. This allows a local user to execute arbitrary commands as ...

CVE-2021-21551

PoC for CVE-2021-21551 Windows LPE using the Dell dbutil23.sys driver. Exploit approach Implement read/write, allocate shellcode, flip page to bypass smep, overwrite haldispatch ptr, execute shellcode...

CVE-2026-8809

CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to 'acfpostid' Parameter This critical security vulnerability CVSS 9.8 affects all versions of the popular WordPress plugin Advanced Custom Fields: Extended ACF Extended from...

CVE-2026-80844

🔥 CVE-2026-80844 - DirtyAH6 Linux Kernel IPv6 AH6 Local Privilege Escalation CVE-2026-80844 is a Linux kernel vulnerability affecting the IPv6 Authentication Header AH6 / XFRM subsystem. The vulnerability is caused by insufficient validation of the IPv6 Routing Header segmentsleft field,...

CVE-2026-68121

⚡ CVE-2026-68121 - PPPoEject Linux Kernel PPPoE Use-After-Free → Local Privilege Escalation A Linux kernel memory-corruption vulnerability in the PPPoE transmit path , caused by a stale pointer to an skbuff header after a device header callback reallocates the skb head. ⚠️ Disclaimer This...

DirtyPipe_exploit

DirtyPipeexploit CVE-2022-0847...

hpim-training-lab

hpim-training-lab HPIM Training-Case Replication Lab Citable release Zenodo: DOI 10.5281/zenodo.22868247 — license CC-BY 4.0. This repository contains a fully containerized replication of the training scenario described in OpenAI's official technical report on the Hugging Face incident, used to...

CVE-2023-6700

CVE-2023-6700 Cookie Information | Free GDPR Consent Solution = 2.0.22 - Authenticated Subscriber+ Arbitrary Options Update Description: CVE-2023-6700 The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability che...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...

CVE-2024-30485

CVE-2024-30485 Exploit 📌 Overview CVE-2024-30485 is a high-severity vulnerability found in the Finale Lite plugin for WordPress versions = 2.18.0. The vulnerability allows authenticated users Subscriber+ to install and activate arbitrary plugins without proper authorization. Severity : HIGH CVSS...

CVE-2025-44823

Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1 ▶️ PoC Demo CVE ID: CVE-2025-44823 Date: 2025-04-02 Authors: Alex Tisdale, Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...

CVE-2021-3560

Polkit Vulnerability - CVE-2021-3560 📕 Introduction In 2021, a researcher named Kevin BackHouse discovered a privilege escalation vulnerability in the polkit utility. however, not all linux versions are vulnerable to polkit. Below is an example of a vulnerable version; Red Hat Enterprise Linux 8...

CVE-2024-50485

CVE-2024-50485 Exam Matrix = 1.5 - Unauthenticated Privilege Escalation Description: The Exam Matrix plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5. This is due to the plugin not properly restricting functionality that makes it possible for...

pwnkit_safety_check

What is PwnKit PwnKit exploits a vulnerability in the SUID-root program /usr/bin/pkexec, allowing unprivileged users to gain full root privileges on Linux systems. This vulnerability has existed since 2009 and was publicly disclosed in January 2022. pwnkitsafetycheck.c PwnKit CVE-2021-4034 Safe...

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914 Azure Networking Privilege Escalation Exploit CVE‑2025‑54914 September 4, 2025 By Mark Mallia 1. Executive Summary On September 4, 2025 Microsoft’s Azure Networking services received a critical security advisory that documents a...