cve-2026-0013-exploit

This repository does not have a README...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 - Unauthenticated Privilege Escalation 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 Unauthenticated Privilege Escalation 📌 Overview This repository contains a Python proof-of-concept tool for CVE-2025-39459 , affecting the Real Estate 7 WordPress theme in versions...

CVE-2022-0847-dirty-pipe-exploit

CVE-2022-0847-dirty-pipe-exploit An exploit for CVE-2022-0847 dirty-pipe vulnerability How to use this Compile with gcc exploit.c -o exploit assumes gcc is installed Run ./exploit and it'll pop a root shell If you are getting error message like then, Login as root with password cspshivam Then,...

beyondtrust-cve-2026-1232

🔍 Vulnerability Research A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance. Purpose: Educational reference and portfolio...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$...

CVE-2026-20817

CVE-2026-20817 - Windows 错误报告 WER ALPC 权限提升 描述 本仓库包含 CVE-2026-20817 的概念验证 PoC，这是 Windows 错误报告 WER 服务中的一个本地权限提升漏洞。该漏洞允许经过身份验证的低权限用户通过向 WER 服务发送特制的 ALPC 消息，以 SYSTEM 权限 执行任意代码。 作者 原始研究与 PoC 作者： Twitter/X: @bytecodevm GitHub: @oxfemale 漏洞详情 CVE ID : CVE-2026-20817 组件 : Windows 错误报告 WER 服务 攻击向量 : 本地...

Auto-Elevate

Auto-Elevate このツールは、UACバイパスやWindowsの組み込み機能の力を示しています。このユーティリティはwinlogon.exeを自動的に特定し、そのプロセスのTOKENを奪取して偽装し、奪取したトークンで新しいSYSTEMレベルのプロセスを生成します。hfiref0xのUACMEユーティリティのUACバイパス方法 41 ICMLuaUtil UAC バイパス と組み合わせることで、このユーティリティは低特権のAdministratorアカウントからNT AUTHORITY\SYSTEMへ自動昇格できます。...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 緩和ツールキット 共有ホスティング環境で CloudLinux / CageFS を使用している LiteSpeed cPanel Plugin に影響を与える CVE-2026-54420 のための防御的な修復、監査、および検証ツールキット。 ⚠️ セキュリティ通知 このリポジトリは、システム管理者、ホスティングプロバイダー、および防御的なセキュリティ研究のみ を対象としています。エクスプロイトコード、攻撃ツール、または武器化された概念実証は含まれていません。 CVE-2026-54420 について CVE-2026-54420...

CVE-2021-34486

CVE-2021-34486 Windows Etw LPE olny tested on windwos 20H2 x64 ed2k://|file|cnwindows10businesseditionsversion20h2updatedmarch2021x64dvdca61aaaa.iso|6074574848|B6741C4E4B09337471B02DC95E953992|/ thanks @yongchuank https://www.pixiepointsecurity.com/blog/advisory-cve-2021-34486.html...

CVE-2023-36165

CVE-2023-36165 An issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code and gain privileges via the SchedulerService.exe component. Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Ida...

Tater

Tater Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit. Credit All credit goes to @breenmachine, @foxglovesec, Google Project Zero, and anyone else that helped work out the details for this exploit. Potato - https://github.com/foxglovesec/Potato Included...

CVE-2017-5638

CVE-2017-5638...

CVE-2017-11783

CVE-2017-11783 1day Exploit by sheisback It isn't complete exploitexec cmd with system privilege, only create file in system32. So you will complete this, need consent.exe uac technique. Reference A view into ALPC-RPC by Clément Rouault & Thomas Imbert, 2017 PacSec...

CVE-2024-4040

CVE-2024-4040 Introduction Recently, I came across this vulnerability and found it quite interesting. I read the following articles and wrote a brief exploit. https://y4tacker.github.io/2023/12/10/year/2023/12/CrushFTP-Unauthenticated-Remote-Code-Execution-CVE-2023-43177/...

elevationstation

Elevation Station SYSTEMトークンを盗み、複製して楽しみと利益を得る！ 物を複製し、双子のコピーを作り、そして乗り去る。 あなたはMetasploitのgetsystemやSysInternals PSEXECを使ってシステム特権を取得したことがありますよね？ さて、ここにそれと似たスタンドアロンバージョンがあります...ただし、AVの問題はありません...少なくとも今のところは😸 このツールはまた、Process Hacker/System Informerができるように、TrustedInstaller...

CVE-2019-10915

The vulnerability is an authentication bypass in the TIA Administrator server. An attacker could execute arbitrary application commands through websockets on the node.js server which is externally exposed by default. By exploiting this vulnerability, an unauthenticated remote attacker could perfo...

CVE-2023-31704

CVE-2023-31704 description Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role. Vulnerability Type Incorrect Access Control Vendor of Product Sourcecodster Affected Product...

CVE-2024-31969

📌 CVE-2024-31969 CVE-2024-31969 is a local privilege escalation vulnerability in sudo when using the sudoedit command. This vulnerability was introduced in sudo 1.9.0 due to the way sudoedit validates user environment variables and file ownership improperly. 📖 Description A flaw introduced in sud...

CVE-2003-0358

CVE-2003-0358 Posting for historical reasons. snowcrash [email protected] https://github.com/snowcra5h/ Description Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line...

RogueWinRM

RogueWinRM RogueWinRM 是一个本地权限提升漏洞利用工具，允许从服务账户（具有 SeImpersonatePrivilege 权限）提升到本地系统账户，前提是 WinRM 服务未运行（Win10 默认未运行，但 Windows Server 2019 并非如此 ）。 简而言之，它会在 5985 端口监听传入连接，伪装成一个真正的 WinRM 服务。 它仅是一个最小的 Web 服务器，会尝试与任何试图连接该端口的服务协商 NTLM 身份验证。 然后，BITS 服务（以 Local System...