Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106179 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

UBUNTU-CVE-2026-84962

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

CVE-2017-7494

CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...

Chromium: CVE-2026-84358 Improper privilege management in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-67397

Plesk for Linux versions 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 are affected by a path traversal vulnerability (CVE-2026-67397) that allows local users with low privileges to execute arbitrary code as root . The vulnerability requires local access with low privileges and no user inte...

CVE-2026-67397

Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root...

CVE-2020-0796-LPE-POC

CVE-2020-0796 Local Privilege Escalation POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes POC to check for CVE-2020-0796 / "SMBGhost" Expected outcome: cmd.exe launched with system access Intended only for educational and testing in corporate environments. ZecOps takes...

GSSC-CVE-2022-41923

Solución alternativa para CVE-2022-41923: Vulnerabilidad de Gestión de Privilegios Resumen La vulnerabilidad CVE-2022-41923 encontrada en el complemento Grails Spring Security Core GSSC sin parche puede dar lugar a una gestión de privilegios inadecuada. Este repositorio describe cómo solucionar e...

CVE-2010-0232

CVE-2010-0232 Development of an exploit for privilege escalation in Windows systems NT / 2k / XP / 2K3 / VISTA / 2k8 / 7 using the vulnerability CVE-2010-0232. This is an educational project I took up to learn the gruesome details of lowlevel kernel exploits, This is my first such exploit. I'm...

CVE-2024-55511

CVE-2024-55511 This repository has been archived and moved here A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially elevate their privileges via executing a specially crafted executable. I am currently creati...

Rootsmart-v2.0

Rootsmart 2.0 w/ cve-2019-2215 + Ransomware Disclaimer This project is solely for educational purposes. This project utilise code from rkshrksh/2048-Game and kangtastic/cve-2019-2215. Project Description This project is part of Singapore Institute of Technology Mobile Security module. The project...

K0mraid3s-System-Shell-PREBUILT

K0mraid3s-System-Shell Way back in 2019, a vulnerability that would come to be known as "CVE-2019-16253" was found that affect Samsung's TTS engine in versions prior to 3.0.02.7. This exploit allowed for a local attacker to escalate privileges to system privileges and was later patched by Samsung...

dirtycow

dirtycow This exploit uses the pokemon exploit of the dirtycow vulnerability as a base and automatically generates a new passwd line. The user will be prompted for the new password when the binary is run. The original /etc/passwd file is then backed up to /tmp/passwd.bak and overwrites the root...

CVE-2021-1675-LPE

Edición de Escalada de Privilegios Local de CVE-2021-1675/CVE-2021-34527 Implementación de escalada de privilegios local de CVE-2021-1675/CVE-2021-34527 también conocido como PrintNightmare. El exploit está editado a partir del publicado por Zhiniang Peng @edwardzpeng y Xuefeng Li @lxf02942370...

CVE-2015-1701

CVE-2015-1701 Win32k Elevation of Privilege Vulnerability. Original info https://www.fireeye.com/blog/threat-research/2015/04/probableapt28useo.html Protection Apply MS15-051 for fix. https://technet.microsoft.com/library/security/MS15-051 Authors c 2015 CVE-2015-1701 Project Credits R136a1...

cve-2010-3847

CVE-2010-3847 script Meant to automate the exploit discussed in http://marc.info/?l=full-disclosure&m=128776663124692&w=2. Tested on CentOS 5 x86. The DSO it outputs is compiled from the following code: root@kitploit: include include include void attributeconstructor init setuid0;...

CVE-2021-3493

CVE-2021-3493 Escalada de privilegios local en Ubuntu OverlayFS Descripción "Problema específico de Ubuntu en el sistema de archivos overlayfs del kernel de Linux, donde no se validaba correctamente la aplicación de capacidades del sistema de archivos con respecto a los espacios de nombres de...

CVE-2026-14199

On instances using Auth Proxy header authentication auth.proxy with identity caching enabled syncttl 0, two distinct user identities could produce the same cache key. An authenticated low-privileged user able to influence their own forwarded identity attributes could be served a higher-privileged...

CVE-2021-21551

CVE-2021-21551 Simple PoC for exploiting CVE-2021-21551 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-21551 An issue was discovered in signed dell windows driver dbutil23.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine lacks of...

dirtycow.cr

dirtycow CVE-2016-5195 exploit Installation Go to the release section or use your crystal environment. Usage root@kitploit: dirtycow --target /path/to/root/file --string "string to write" --offset...