296503 matches found
Reproducing-CVE-2023-36802
AnΓ‘lisis de CVE-2023-36802 Bienvenido a mi anΓ‘lisis y guΓa de CVEβ2023β36802, una vulnerabilidad de escalada de privilegios local en Microsoft Kernel Streaming Server mskssrv.sys. ΒΏDe quΓ© trataba este CVE? El error residΓa en mskssrv.sys, un controlador que ayuda a Windows a gestionar la...
CVE-2021-4034
CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkitβs pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...
CVE-2024-22026
CVE-2024-22026 POC de exploit para CVE-2024-22026 que afecta a Ivanti EPMM "MobileIron Core" CVE-2024-22026 es una vulnerabilidad de escalada de privilegios local en las versiones del servidor Ivanti EPMM anteriormente MobileIron anteriores a 12.1.0.0, 12.0.0.0 y 11.12.0.1. Esta vulnerabilidad...
mariadb-13-rce-lab
MariaDB 13.0.1-rc RCE Lab Remote code execution on the unmodified, stock MariaDB 13.0.1-rc Docker image as uid 999 mysql. Two exploit variants: Variant| File| Requirements| Notes ---|---|---|--- Pure SQL recommended| exploitpuresql.py| a low-priv MariaDB account + TCP| no host access, no docker, ...
litespeed-cache-xss-poc
PoC de XSS en LiteSpeed Cache PoC de vulnerabilidad XSS en el plugin LiteSpeed Cache de WordPress que permite escalar privilegios. Esta vulnerabilidad fue corregida en la versiΓ³n 5.7.0.1 del plugin y se le asignΓ³ CVE-2023-40000. SegΓΊn la pΓ‘gina de vista avanzada del plugin, aproximadamente el 35%...
Patch-the-Path-CVE-2025-55234-Detection-Defense
Patch-the-Path-CVE-2025-55234-Detection-Defense This playbook outlines detection, containment, and remediation strategies for CVE-2025-55234, a critical Windows SMB privilege escalation flaw. By Mark Mallia Introduction In todayβs constantly shifting cyber-risk landscape, the ability to pivot fro...
CVE-2023-0386
Se encontrΓ³ una falla en el kernel de Linux, donde se detectΓ³ acceso no autorizado a la ejecuciΓ³n del archivo setuid con capacidades en el subsistema OverlayFS del kernel de Linux, en la forma en que un usuario copia un archivo con capacidades desde un montaje nosuid a otro montaje. Este error de...
litespeed-cpanel-cve-2026-54420-fix
Kit de MitigaciΓ³n CVE-2026-54420 Kit de remediaciΓ³n, auditorΓa y verificaciΓ³n defensiva para CVE-2026-54420 que afecta al LiteSpeed cPanel Plugin en entornos de hosting compartido que utilizan CloudLinux / CageFS. β οΈ Aviso de Seguridad Este repositorio estΓ‘ destinado ΓΊnicamente a administradores d...
CVE-2023-1326
CVE-2023-1326 Una prueba de concepto para CVE-2023β1326 en apport-cli 2.26.0 Esta vulnerabilidad es una escalada de privilegios en apport-cli 2.26.0, similar a CVE-2023β26604, esta vulnerabilidad solo funciona si se asigna en sudoers: Se encontrΓ³ un ataque de escalada de privilegios en apport-cli...
CVE-2025-32463
Reference: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Executing the PoC on Ubuntu 24.04.2 LTS server with Sudo v1.9.15p5, using an unprivileged user with no Sudo rules defined, results in a root shell outside of the chrooted environment. lowpriv@prod:/CVE-2025-3246...
CVE-2025-64155
CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution Proof of concept exploit for Fortinet FortiSIEM which abuses an argument injection to write a file to gain code execution as root Blog Post Deep-dive analysis here: Horizon3.ai - CVE-2025-64155: Three Years of Remotely...
CVE-2019-0803
CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...
oxide_hive
Oxide Hive An exploit for the HiveNightmare/SeriousSAM vulnerability that allows you to read registry hives containing sensitive data without admin privileges. If that doesn't sound like privilege escalation I don't know what does. Usage After building the exploit with cargo build and retrieving...
CVE-2026-41651
π¨ CVE-2026-41651 β Pack2TheRoot Privilege Escalation Vulnerability in PackageKit TOCTOU Race Condition π Overview CVE-2026-41651 is a local privilege escalation vulnerability affecting the PackageKit system service used in various Linux distributions. The vulnerability is caused by a Time-of-Chec...
RegPwnBOF
RegPwn BOF AdaptaciΓ³n BOF de Cobalt Strike del exploit RegPwn por Filip Dragovic @Wh04m1001 / MDSec ActiveBreach. Esta es una reimplementaciΓ³n BOF descuidada del exploit original en C. Todo el crΓ©dito por la investigaciΓ³n de la vulnerabilidad y el exploit pertenece a Filip Dragovic y MDSec...
AD-PathFinder
ADPathFinder ADPathFinder is an attack mapping tool for pentesters and red teamers. It analyses SharpHound data and unifies it with OpenGraph plugins to surface attack paths to high-value targets such as Domain Admins and Domain Controllers, starting from low-privileged users and computers...
dirtyclone-exploit
DirtyClone Exploit Framework CVE-2026-46331 β Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption Β· Affected kernels: β€ 6.12.9 root@kitploit: βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ β β β | \ | | / | | β β | | | | | '| | | | | | | |/ | ' \ ...
CVE-2026-43499-armv7
CVE-2026-43499 GhostLock β ARM32 Huawei Watch 4 Pro Linux kernel privilege escalation exploit attempt based on CVE-2026-43499 GhostLock β Huawei Watch 4 Pro MDS-AL00, armv7l Project Overview This project is a GhostLock kernel vulnerability exploit attempt targeting the Huawei Watch 4 Pro MDS-AL00...
The vulnerability of the βTekonβ SCADA system, related to the incorrect assignment of permissions for critical resources, allows for the increase of its privileges.
The vulnerability of the βTekonβ SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...