Mass-CVE-2023-28121

CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User Introduction This script using Python3 and use threading for better process speed. The script has ben updated to 2 version. V1 is the old version and V2 the newer version with random username, ema...

Juicy-Potato-x86

Juicy-Potato-x86 Juicy Potato para Windows x86 Esta es una versión del Juicy Potato de ohpe, exploit de escalada de privilegios, modificada para Windows x86. Conservé la mayor parte del código posible, haciendo los pequeños cambios necesarios para compilar para Windows x86. Probado con éxito en...

CVE-2017-16995

CVE-2017-16995 tested for Ubuntu 16.04.01 - Linux 4.4.0-31-generic 50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016 x8664 This vulnerability allow a simple user to do a privilege escalation and get a root shell if different kernel adjust CRED offset + check kernel stack size...

CVE-2022-38813

CVE-2022-38813 Escalada de privilegios vertical a través del parámetro user en Blood Donor Management System Using Codeigniter v 1.0 Descripción técnica: Blood Donor Management System 1.0 no restringe adecuadamente el acceso a admin/dashboard.php, lo que permite a los atacantes acceder a todos lo...

CVE-2024-30088-Windows-poc

CVE-2024-30088-Windows-poc This vulnerability exists in the NtQueryInformationToken function, specifically when handling the AuthzBasepCopyoutInternalSecurityAttributes function. It originates from improper management of the locking mechanism by the kernel when operating on objects. This flaw cou...

CVE-2021-27965

CVE-2021-27965 Simple PoC for exploiting CVE-2021-27965 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-27965 An issue was discovered in signed MICSYS windows driver MsIo64.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine suffers from...

CVE-2021-27285

CVE-2021-27285 浪潮ClusterEngine集群管理平台是专为浪潮天梭系列HPC产品定制的一款作业管理软件。浪潮ClusterEngine存在suid配置不当的问题，导致非管理员用户可以通过部分组件进行提权获得root权限。 浪潮clusterenginev4.0存在组件“/opt/tsce4/torque6/bin/getJobsByShell”suid配置不当问题，非管理员用户能通过suid提权方式获得root权限。 提权过程如下： root@kitploit: inspur@mu01 $ whoami inspur inspur@mu01 $...

CVE-2016-8655_Android

CVE-2016-5195 GoldFish 3.4 This works on the goldfish 3.4 Emulator Initroot: https://alephsecurity.com/2017/06/07/initroot-moto/ has been released for my device harpia, so I have stopped porting the exploit to my device harpia/.... I have learnt a large amount from working on this project, but...

CVE-2023-28218

Report CVE-2023-28218 Bug overview Bug leading to privilege escalation in the Windows kernel. The bug appears in the driver Windows Ancillary Function Driver for WinSock AFD.sys. The bug was released in the patch dated 11/04/2023. It has a CVSS:3.1 7.0 / 6.1 score and is rated as Important. Bug...

CVE-2021-3560-Polkit-Privilege-Escalation

CVE-2021-3560-Polkit-Privilege-Escalation by Mark, Qingchen Yu To build the container with root@kitploit: docker build -t . To run the container root@kitploit: docker run -it 1. start with start.sh 2. Measura Execution Time: Note the 'real' time and calculate half of it. root@kitploit: time...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2023-32629-CVE-2023-2640---POC-Escalation

CVE-2023-32629 & CVE-2023-2640 : Privilege escalation Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640. TOTALLY STOLE IT FROM https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 PLEASE RETWEET THE ORIGINAL SOURCE I just wanted to...

CVE-2022-41040-metasploit-ProxyNotShell

CVE-2022-41040-metasploit-ProxyNotShell the metasploit scriptPOC about CVE-2022-41040. Microsoft Exchange are vulnerable to a server-side request forgery SSRF attack. An authenticated attacker can use the vulnerability to elevate privileges. preparation POC root@kitploit: git clone...

NetRipper

Description NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before encryption/after...

noPac

noPac CVE-2021-42287/CVE-2021-42278 Escáner y Explotador. Otra explotación de bajo esfuerzo para pasar de usuario de dominio a administrador de dominio. Si un Controlador de Dominio es vulnerable, devolverá un TGT sin PAC, todas las miradas en tickets de tamaño pequeño. Mitigación ¡Parchea tus...

CVE-2025-27237

CVE-2025-27237 Local privilege escalation vulnerability in Zabbix Agent/Agent2 for Windows via OpenSSL configuration file hijacking. Overview Field| Value ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 HIGH CWE| CWE-427: Uncontrolled Search Path Element Type| Local Privilege Escalation Vendor|...

CVE-2020-13885

Exploit Title: Citrix Workspace app before 1912 for Windows - Privilege Escalation 1 Date: 2020-06-07 Author: Andrew Hess Software Link: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bulletin:...

Critical: Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property

A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be installed on a connection following a subsequent, unrelated successful bind, regardless of which SASL mechanism completes...

Gin-Vue-admin-poc-CVE-2022-21660

Gin-Vue-admin Vertical Privilege Escalation Vulnerability and Code Analysis - CVE-2022-21660 1. Foreword Welcome everyone to give this project a star.http https://github.com/flipped-aurora/gin-vue-admin/ root@kitploit: After finishing the article, applying for a CVE was somewhat troublesome, but...