CVE-2024-45265

CVE-2024-45265 Descripción sugerida Una vulnerabilidad de inyección SQL en el componente de encuestas en SkySystem Arfa-CMS anterior a 5.1.3132 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro psid. Tipo de vulnerabilidad CWE-89 | Inyección SQL Proveedor del...

MegaHiDocker

MegaHiDocker This project will be exploited for some docker containers with similar vulnerability code: CVE-2020-35191, but this time on other containers. = Please read the Description.txt file Requirement: 1.Need to Install docker in your Linux AND Install subprocess module for python 3.X. 2.You...

Leantime-POC

Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 Descripción Las siguientes vulnerabilidades fueron identificadas en la versión 3.0.6 del sistema de gestión de proyectos orientado a objetivos Leantime. CVE-2024-27474 Una vulnerabilidad de falsificación de petición en sitios cruzados CS...

Windows-Privilege-Escalation-CVE-2021-1732

Windows Privilege Escalation CVE-2021-1732 Affected windows versions: Win10 1803 - 20H2, WinServer 2019, 2004 Screenshots: Read More On My Blog:- https://www.exploitblizzard.com/post/windows-privilege-escalation-cve-2021-1732...

CVE-2025-24076

CVE-2025-24076 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Exploit Overview This script exploits a vulnerability in the Windows Cross Device Service that allows privilege escalation on Windows 11 , Windows Server 2025 , and Windows Server 2022 23H2 Server Core...

CVE-2022-21882

CVE-2022-21882 win32k LPE bypass CVE-2021-1732 Test only tested on windows 20h2 19042.1415 tested on windows 21H1 not working Download https://raw.githubusercontent.com/David-Honisch/CVE-2022-21882/main/x64/Release/CVE-2021-1732.exe Many thanks to Kalendski. Based on:...

diskwalker

Diskwalker un script sencillo para recorrer tu disco y realizar un seguimiento de conjuntos interesantes de archivos Después de obtener acceso a una máquina remota durante una prueba de penetración, es posible que quieras encontrar archivos de configuración o binarios interesantes para intentar u...

CVE-2023-51518

CVE-2023-51518: Preauthenticated Java Deserialization via JMX in Apache James Apache James distribution prior to release 3.7.5 and 3.8.1 allow privilege escalation via JMX pre-authentication deserialization. Given a deserialization gadget, this could be leveraged as part of an exploit chain that...

CVE-2022-29063

CVE-2022-29063: Java Deserialization via RMI Connection in Apache OfBiz The OfBiz Solr plugin is configured by default to automatically make a RMI request on localhost, port 1099. By hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or on a...

CVE-2022-23862

CVE-2022-23862: Local Privilege Escalation via Unauthenticated JMX in YSoft SafeQ The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the “NT Authority\System” user, we were able to use the...

CVE-2021-20253

CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...

CVE-2020-8248

CVE-2020-8248: Privilege Escalation via Zip Wildcard Exploit in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely calls a zip command with wildcards “”. By writing files with specifically crafted names, in a user- controlled folder...

CVE-2020-8250

CVE-2020-8250: Privilege Escalation via Command Injection in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely passes the “HOME” environmental variable to “system”. By altering the “HOME” variable to contain special shell characters Ex: “” or...

CVE-2020-11107

CVE-2020-11107 Este es un writeup de la CVE-2020-11107 que he encontrado. Se descubrió un problema en XAMPP anterior a 7.2.29, 7.3.x anterior a 7.3.16 y 7.4.x anterior a 7.4.4 en Windows. Un usuario sin privilegios puede cambiar una configuración de un .exe en xampp-contol.ini para todos los...

CVE-2019-19268

CVE-2019-19268 Affected Version: rConfig 3.9.2. Description Multiple attack vectors in rConfig v3.9.2 due to misconfiguration, which allows local users to execute root commands via sudo. Discoverers dmw0ng - Discord: dmw0ng4449 TheCyberGeek - Discord: TheCyberGeek1892 Email: [email protected]...

cve-2022-21882-poc

cve-2022-21882-poc lpe poc for cve-2022-21882...

CVE-2024-31969

📌 CVE-2024-31969 CVE-2024-31969 is a local privilege escalation vulnerability in sudo when using the sudoedit command. This vulnerability was introduced in sudo 1.9.0 due to the way sudoedit validates user environment variables and file ownership improperly. 📖 Description A flaw introduced in sud...

printix-CVE-2022-29551

CVE-2022-29551 Simple Release | Print Friendly A "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to install malicious printer drivers...

exploits

exploits CVE-2021-22600: Exploit de escalada local de privilegios en el kernel de Linux CVE-2021-3156: Escalada local de privilegios en Linux mediante desbordamiento de montón en sudo Demo CVE-2021-3156: Exploit de un solo disparo para la vulnerabilidad de desbordamiento de montón en sudo...

CVE-2024-10793

CVE-2024-10793 PoC Set this lines to your hosts file: root@kitploit: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com Launch Wordpress using docker: root@kitploit: $ sudo systemctl start docker $ sudo docker-compose up -d Open http://goodcms.lab:2121 and do installation wordpress steps. Install...