CVE-2022-1015

CVE-2022-1015 This repository contains a PoC for local privilege escalation of CVE-2022-1015, a bug in the nftables component of the linux kernel that I found. You can read a detailed analysis of this vulnerability and the exploitation strategy over at my blog. Right now, the exploit is a bit...

SneakyEXE

SneakyEXE root@kitploit: /$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$$$$$$$ /$$ $$ | $$ | $$/| $$ / $$| $$/ | $$ / /$$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$ /$$ /$$| $$ | $$/ $$/| $$ | $$$$$$ | $$ $$ /$$ $$ | $$| $$ /$$/| $$ | $$| $$$$$ \ $$$$/ | $$$$$ \ $$| $$ \ $$| $$$$$$$$ /$$$$$$$| $$$$$$/ | $$ | $$| $$/ $$ $$ ...

SCMKit

SCMKit Descripción S ource C ode M anagement Attack Toolkit - SCMKit es un conjunto de herramientas que se puede utilizar para atacar sistemas SCM. SCMKit permite al usuario especificar el sistema SCM y el módulo de ataque a utilizar, junto con la especificación de credenciales válidas nombre de...

CVE-2025-63946-Tencent-PC-Manager-EoP

CVE-2025-63946 Tencent PC Manager EoP version: PCManager Version lower or equal 17.10.28554.205 Summary: I discovered a vulnerability in Tencent PC Manager where files and directories under C:\Windows\Temp are insecurely handled. An attacker can leverage symbolic link symlink attacks to coerce a...

PurplePanda

PurplePanda Esta herramienta obtiene recursos de diferentes aplicaciones cloud/saas centrándose en permisos para identificar rutas de escalada de privilegios y permisos peligrosos en las configuraciones cloud/saas. Tenga en cuenta que PurplePanda busca tanto rutas de escalada de privilegios dentr...

PegasusX

PegasusX OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656 CVEs Analysis & Writeup A detailed analysis of the CVEs used in this PoC is available here: Analysis and exploitation of Pegasus kernel vulnerabilities CVE-2016-4655 / CVE-2016-4656...

pyCobaltHound

Resumen rápido pyCobaltHound es una extensión de script Aggressor para Cobalt Strike que tiene como objetivo proporcionar una integración profunda entre Cobalt Strike y Bloodhound. pyCobaltHound se esfuerza por ayudar a los operadores de equipos rojos mediante: Consultar automáticamente la base d...

json-interop-vuln-labs

JSON Interoperability Vulnerability Labs Description These are the companion labs to my research article "An Exploration of JSON Interoperability Vulnerabilities". Lab 1: Free purchases in an E-commerce Application Key Collision Attacks: Inconsistent Duplicate Key Precedence Inconsistent Large...

blanket

blanket Blanket es una evasión de sandbox dirigida a iOS 11.2.6, aunque la vulnerabilidad principal solo se parcheó en iOS 11.4.1. Explota una vulnerabilidad de reemplazo de puertos Mach en launchd CVE-2018-4280, así como varias vulnerabilidades menores en otros servicios, para ejecutar código...

CVE-2023-32243-Detection-and-Mitigation-in-WordPress

🔐 CVE-2023-32243 – Detection and Mitigation in WordPress 📘 Project Title: Detection and Mitigation of CVE-2023-32243 in the Essential Addons for Elementor WordPress Plugin 🧠 Abstract This project explores the exploitation and prevention of CVE-2023-32243 , a critical privilege escalation...

BrokenPipe

BrokenPipe - Steam Client Service LPE Vulnerability This is the single-script version. The original compiled C++ PoC is on the legacy branch. Thanks to John Hammond for the suggestion, subscribe to him! PoC video: YouTube John Hammond's breakdown: YouTube Greetz to @MSNIGHTMARE2000 for the inspo ...

CVE-2021-3156

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on Ubuntu 20.04 against sudo 1.8.31 All research credit: Qualys Research Team Check out the details on their blog. You can check your version of sudo is vulnerable with: $ sudoedit -s Y. If it asks f...

CVE-2026-24291

🔓 Privilege Escalation Bypass Utility v2026 Streamlined Access Elevation for Advanced Windows Workflows 🧠 Conceptual Overview This tool is engineered for power users who require frictionless elevation of system permissions without repetitive manual authentication. Think of it as a digital skeleto...

CVE-2026-1937

🔴 Vulnerability Overview CVE-2026-1937 — Missing Authorization → Arbitrary Options Update → Privilege Escalation Description: The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized modification of data leading to Privilege Escalation in all versions up to an...

EUVD-2026-38570

Ash: Private action arguments can be set by user input via string-keyed params and atomic changesets...

CVE-2025-32463

CVE-2025-32463: Sudo Privilege Escalation chroot This repository contains information and/or a proof of concept PoC about the vulnerability CVE-2025-32463 , a critical local privilege escalation flaw in the sudo utility. 📌 Description The vulnerability allows a local user to gain root access by...

CVE-2025-2304-POC

CVE-2025-2304-POC Manual poc for CVE-2025-2304: Camaleon CMS Version 2.9.0 Exploitation Steps 1. Log in as a low-privileged user e.g., "Bob". 2. Intercept the password change using a proxy e.g Burpsuite, caido and more 3. Capture the updatedajax request during a password change. 4. Inject the...

EUVD-2026-44773

Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces...

CVE-2026-86860

ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...

CVE-2022-0847

CVE-2022-0847 - Dirty Pipe Exploit A proof-of-concept exploit for CVE-2022-0847 Dirty Pipe, a Linux kernel vulnerability that allows unprivileged users to write to read-only files. Vulnerability Details CVE-2022-0847 affects Linux kernels 5.8 through 5.16. It exploits a race condition in the Linu...