CVE-2022-34918-LPE-PoC

CVE-2022-34918 LPE PoC LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic You can find the associated write-up on our blog Usage getroot should be in the current folder $ ls getroot poc $ ./poc License Copyright 2022, RandoriSec...

CVE-2025-32463

CVE-2025-32463 Sudo chroot Elevation of Privilege Affects Sudo versions 1.9.14 to 1.9.17. CVE-2025-32463 was introduced in Sudo v1.9.14 June 2023 with the update to the command matching handling code when the chroot feature is used...

CVE-2023-20198

🔍 Cisco IOS XE Web UI Vulnerability Scanner - CVE-2023-20198 🚨 🚫 Critical Risk | CVSS: 10.0 | 📅 Updated: Oct 17, 2023 Overview: A swift and powerful scanner for detecting critical vulnerabilities in the web UI of Cisco IOS XE Software. Protect your system from unauthorized level 15 access, puttin...

patch-CVE-2026-19843

Patch: CVE-2026-19843 Vulnerability Details CVE : CVE-2026-19843 Product : Cisco IOS XE Description : Privilege escalation via web UI Severity : High Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-06-15 Status| deployed Deployed To| Production Validated By| SecOps Team References NV...

Windows_AFD_LPE_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f 复现文章:hlingxbm For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: WindowsAFDLPECVE-2023-21768.exe where is the process ID in...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automated exploitation of CVE-2022-26923 Certifried , enabling privilege escalation through abuse of Active Directory Certificate Services AD CS, with an automatic fallback to Resource-Based Constrained Delegation RBCD, ultimately dumping the NTLM...

BlueDoor

BlueDoor CTF Challenge Overview Challenge Name : BlueDoor CVE : CVE-2017-0144 EternalBlue Difficulty : 3/5 Category : Exploitation, Windows Authors : Seth Davis BlueDoor simulates a real-world vulnerability EternalBlue - CVE-2017-0144 in a Windows 7 system. The objective is to exploit the...

CVE-2021-20253

CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...

Disable-TamperProtection

Disabling Tamper Protection and other Defender / MDE components It is possible to abuse SYSTEM / TrustedInstaller privileges to tamper or delete WdFilter settings ALTITUDE regkey and unload the kernel minidriver to disable Tamper protection and other Defender components. This also affects...

LeakedWallpaper

Leaked Wallpaper This is a privilege escalation tool fixed with CVE-2024-38100 in KB5040434 that allows us to leak a user's NetNTLM hash from any session on the computer, even if we are working from a low-privileged user. Usage .\LeakedWallpaper.exe \\c$\1.jpg -downgrade Example...

CVE-2022-0847-DirtyPipe-Exploit

CVE-2022-0847-DirtyPipe Vulnerability Overview On March 7, foreign security researcher Max Kellermann published a blog disclosing a local privilege escalation vulnerability CVE-2022-0847 in the Linux kernel: https://dirtypipe.cm4all.com/ CVE-2022-0847 is a local privilege escalation vulnerability...

CVE-2020-0683

CVE-2020-0683 Original Poc sent to MSRC. Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-0683 Source code for Visual Studio C++ 2017 Please read the PDF that describes all the findings and steps to...

CVE-2021-3156

Exploit CVE-2021-3156 Executing: $ git clone https://github.com/RodricBr/CVE-2021-3156 $ cd CVE-2021-3156/ $ chmod u+x programa.sh $ ./programa.sh One-Liner: AA=$sudo --version | tr ':space:' ','| tr -d '.' | cut -d ',' -f3 | awk 'print $0'; "$AA" -lt 1828 && echo -e "Exploitável\nCVE-2021-3156";...

CVE-2019-16097

CVE-2019-16097-batch Disclaimer Only for security research purposes. Do not use for illegal testing. You bear all consequences!!! CVE-2019-16097-batch Batch vulnerability exploitation script Add target addresses in batch to the url.txt file http://1.1.1.1 http://2.2.2.2 Run this script with Pytho...

CVE-2026-31431

CVE-2026-31431 Copy Fail Local Privilege Escalation Copy Fail is a new Linux kernel zero-day that allows any authenticated user to gain root privileges Local Privilege Escalation, or LPE on almost every Linux distribution since 2017. An easy-to-use exploit is already public. Vulnerable list of...

CVE-2025-29338

CVE-2025-29338 — Security Advisory Buffer Overflow in NXP moal.ko Wi-Fi Kernel Driver woalsetupmoduleparam / parsecfggetline Field| Value ---|--- CVE ID| CVE-2025-29338 Severity| High CVSS v3.1 Score| 7.8 CVSS v3.1 Vector| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Vulnerability Type| Stack-Bas...

CVE-2022-37706

CVE-2022-37706 The CVE-2022-37706 vulnerability is related to the Enlightenment window manager, specifically the enlightenmentsys binary. This binary has the SUID Set User ID bit enabled, meaning it can be executed with elevated privileges usually as the root user. Summary: Vulnerability :...

CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC

Symantec Encryption Desktop PGPwded.sys local privilege escalation PoC This repository contains a proof-of-concept for a local privilege escalation path in Symantec Encryption Desktop's PGPwded.sys storage filter, based on a low-privileged raw disk read/write primitive. The PoC was developed and...

CVE-2016-0051

CVE-2016-0051 Proof-of-concept BSoD Blue Screen of Death and Elevation of Privilege to SYSTEM code for my CVE-2016-0051 MS-016. EoP to SYSTEM on Windows 7 SP1 x86 BSoD on a Windows 10 x64 Links Microsoft Security Bulletin MS16-016 Microsoft Acknowledgements page A variant of this PoC where the...

CVE-2026-43494

🛠️ PinTheft — CVE-2026-43494 Local Privilege Escalation in Linux Kernel via RDS + iouring Page Cache Overwrite 📌 Overview PinTheft is a sophisticated local root exploit for CVE-2026-43494 , a reference-counting bug in the Linux kernel's Reliable Datagram Sockets RDS subsystem. By combining a...