exploit_cve-2007-2447_again

exploitcve-2007-2447again just remeber how small mistake in santisize username could give yoy root access to the full machine...

CVE-2025-32463

📌 CVE-2025-32463 — Sudo --chroot Local Privilege Escalation ExploitDB ID: 52352 🧠 Overview This repository documents a critical local privilege escalation LPE vulnerability affecting Sudo versions 1.9.14 – 1.9.17. The vulnerability arises from an incorrect implementation of the sudo -R --chroot...

CVE-2025-6934

🚨 WordPress OpalEstate Plugin - Unauthenticated Privilege Escalation Vulnerability 🔎 Description The OpalEstate plugin for WordPress contains a critical vulnerability in its AJAX registration handler, allowing unauthenticated users to register as administrators. The issue lies in the insecure...

CVE-2024-37081

VMware vCenter - CVE-2024-37081 Proof of Concept Description This repository contains a proof of concept PoC for the vulnerability CVE-2024-37081 in VMware vCenter. The vulnerability is due to a misconfiguration in the /etc/sudoers file that allows the preservation of dangerous environment...

CVE-2020-0796-LPE-POC

CVE-2020-0796-LPE-POC Privilege Escalation POC 64-bit environment...

CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention

🔴 CVE-2026-31431 — Copy Fail Linux Kernel Local Privilege Escalation LPE — Defensive Research Repository 📖 Overview Copy Fail CVE-2026-31431 is a Local Privilege Escalation LPE vulnerability affecting the Linux kernel via controlled corruption of the page cache through the AFALG, splice and...

Fragnesia-CVE-2026-46300

🔴 Fragnesia — CVE-2026-46300 Privilege escalation in the Linux kernel · CVSS 7.8 · Disclosed on May 14, 2026 Awareness repository only. This repository does not contain exploit code. Its purpose is to inform system administrators, engineers, and security teams about the nature of the vulnerabilit...

CVE-2019-6329

Local Privilege Escalation in HP Support Assistant A local privilege escalation bug in HP Support Assistant by abusing hard link Researcher: ManhNDd of Bkav Description In HP Support Assistant GUI , when you click Check for updates and messages , the service HP Support Solution Framework will run...

CVE-2021-3560

CVE-2021-3650 CVE-2021-3650 Exploit Credit https://github.blog/security/vulnerability-research/privilege-escalation-polkit-root-on-linux-with-bug/ https://github.com/Almorabea/Polkit-exploit...

velociraptor_CVE-2025-6264_PoC

CVE-2025-6264 DISCLAIMER: This is an educational research project. I did not discover this vulnerability. This repository demonstrates CVE-2025-6264 for learning purposes Affected versions before 0.74.3 Affects Windows, MacOS and Linux The Admin.Client.UpdateClientConfig artifact is missing...

CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: WindowsAFDLPECVE-2023-21768.exe where is the process ID in decimal of the...

CVE-2023-27146-LocalPotato-Priviledge-Escalation

CVE-2023-27146-LocalPotato-Priviledge-Escalation...

CVE-2025-10576

CVE-2025-10576 HP Sound Research SECOMNService Escalation of Privilege. Weak registry permissions allows any user to create a registry symlink and force the SECOMNService service to create an arbitrary registry key. How to: 1. soundresearchpoc.exe prepare 2. Restart SECOMNService or the machine 3...

CVE-2023-31443

CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE. Suggested description NorduGrid nordugrid-arc-wn 6.14.0 has the arc-job-cgroup SUID binary that is vulnerable to a path traversal attack. Combined with a race condition, the attacker can write the ppid to any file as long as the file is writable by...

CVE-2023-22809

CVE-2023-22809 Ref: https://vulners.com/cve/CVE-2023-22809 Exploit Title: sudo 1.8.0 - 1.9.12p1 - Privilege Escalation Exploit Author: n3m1.sys CVE: CVE-2023-22809 Date: 2023/01/21 Vendor Homepage: https://www.sudo.ws/ Software Link: https://www.sudo.ws/dist/sudo-1.9.12p1.tar.gz Version: 1.8.0 to...

CVE-2021-4034

Pwnkit Vulnerability - CVE-2021-4034 📗 Introduction Discovered in 2021 but announced and disclosed in January 2022, CVE-2021-4034 was affectionately named Pwnkit, however, it is available in all versions of the Policy Toolkit - Polkit package in practically all OS - Linux distributions. In short,...

CVE-2018-1058

CVE-2018-1058 — PostgreSQL Search Path Demonstration This repository contains the final report and the reproducibility artifacts for: CVE-2018-1058: Privilege Escalation in PostgreSQL through Uncontrolled Search Path The goal is to demonstrate the search-path trust failure behind CVE-2018-1058...

CVE-2026-107565

A flaw in luksmeta allows a local attacker with administrative privileges to cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. The root cause is identified as incorrect boundary calculations and flawed overlap detection within the luks1 metadata allocator. Con...

CVE-2026-14281

CVE-2026-14281 — WAWP Automation Web Platform Unauthenticated Privilege Escalation Python 3 PoC for CVE-2026-14281 in the WordPress plugin Automation Web Platform automation-web-platform — WAWP / Notifications & OTP for WooCommerce. PoCbit Listed on PoCbit — community catalog:...

CVE-2026-98370

A flaw was found in the Linux kernel's IPsec Internet Protocol Security subsystem. A local attacker can exploit this issue by submitting 32-bit compatibility requests, which triggers a race condition during message translation. This flaw leads to a use-after-free condition, potentially allowing a...