android-workprofile-exploit

Android Work Profile Security Research Controlled lab research on Android work-profile provisioning behavior, policy timing, and enterprise isolation boundaries. This repository documents academic security research performed in a controlled environment. It is not intended for unauthorized access,...

CVE-2026-43284

Dirty Frag — kernel page-cache write tracking site Source for the Dirty Frag patch-status tracker: a single-page site recording which distributions have shipped a fix for the paired page-cache write privilege-escalation chain in the Linux kernel. Where the facts live Everything about the bug — CV...

CVE-2026-31431

CVE-2026-31431 — Copy Fail tracking site Source for the Copy Fail patch-status tracker: a single-page site recording which distributions have shipped a fix for the algifaead privilege escalation in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affected and fixed...

CVE-2026-57850

Summary RustDesk sessions are authorized for a specific connection type — Remote full desktop control, FileTransfer, PortForward, ViewCamera, or Terminal. Before 1.4.9, the server's post-authorization message gate only checked one boolean, self.authorized, and never re-checked it against the...

CVE-2026-43499_OPPO-MT6835

CyberMeowfia — GhostLock CVE-2026-43499 Research GhostLock : Linux Kernel futex PI Use-After-Free vulnerability, CVE-2026-43499. Attackers exploit PI-futex dependency loops to trigger a race condition, achieving local privilege escalation on kernels with CONFIGFUTEXPI=y. Target : OPPO PLS120 OP5E...

libput_user_exploit

ATTENTION !!! This exploit writes more 3 bytes with zero. root@kitploit: But it is enough to install ptmx.fsync handler and modify ueventhelper string...

CVE-2014-0816

CVE-2014-0816 这是针对CVE-2014-0816 JVNDB-2014-000026：Norman Security Suite 权限提升漏洞 的利用程序。 该利用程序通过利用 ngs.sys / ngs64.sys 中 IOCTL 处理程序的漏洞，从非管理员权限启动具有 SYSTEM 权限的 CMD.exe。 用法 root@kitploit: C:\Users\user\Desktop exploitngs.exe Exploit Norman General Security Driver ngs.sys / ngs64.sys Target file version...

CVE-2019-11932

CVE-2019-11932 The system address and the gadget must be replaced by the real address found by an information disclosure vulnerability. After replacing the system address and the gadget. Run the code to generate the malicious GIF file: root@kitploit: notroot@osboxes:/Desktop/gif$ make...

CVE-2023-28252-Compiled-exe

CVE-2023-28252-Compiled-exe A modification of Fortra's excellent CVE-2023-2852 Privesc Exploit. Works on Windows 11 21H2 clfs.sys version 10.0.22000.1574 - also works on Windows 10 21H2, Windows 10 22H2, Windows 11 22H2 and Windows server 2022. This version retains the original functionality, but...

CVE-2021-41091

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

CVE-2019-1388

CVE-2019-1388 guest→系统（UAC手动提权，gif图略慢，请稍等 参考链接 http://www.svenbeast.com/post/OsMblUp6w/ https://github.com/Lz1y/imggo...

CVE-2025-0087-

CVE-2025-0087- CVE-2025-0087 EoP full PoC...

amd_eop_poc

amdeoppoc CVE-2020-8950 来自 Radeon 软件的 AMD 用户体验计划启动器权限提升（文件写入 EOP） 请阅读 note.txt https://heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.html https://heynowyouseeme.blogspot.com/2020/02/another-privilege-escalation-filewrite.html @404death...

cve-2024-31317

Exploración de CVE-2024-31317 CVE-2024-31317 proporciona acceso sin privilegios a cualquier uid y ámbito SELinux disponible para aplicaciones de Android legítimas. Esto proporciona acceso al uid 1000 system y uid 2000 shell, y puede activarse completamente desde una aplicación sin privilegios,...

CVE-2020-9442

Exploit Title: OpenVPN Connect for Windows MSI - 3.1.0.361 - Privilege Escalation Date: 2020-02-28 Author: Andrew Hess Software Link: https://openvpn.net/client-connect-vpn-for-windows/ Version: 3.1.0.361 MSI CVE: CVE-2020-9442 History 2019.12.15 - Vulnerability discovered 2019.12.15 - Initial...

CVE-2022-0847

CVE-2022-0847 Dirty Pipe análisis de escalada de privilegios en Linux toc Este artículo se publicó originalmente en la cuenta pública de seguridad de Huawei, esta es la versión del blog más completa Enlace original: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Resumen de la vulnerabilidad ID...

CVE-2024-2432-PaloAlto-GlobalProtect-EoP

CVE-2024-2432 Palo Alto GlobalProtect EoP 在 Windows 系统上，发现 GlobalProtect（App 版本 6.1.1-5 和 6.2.0-89）存在通过符号链接攻击以 SYSTEM 权限进行任意文件删除的漏洞，从而导致本地权限提升。 经观察，当 Windows 非特权用户尝试使用 GlobalProtect 连接 VPN 时，进程 "PanGpHip.exe" 会以 SYSTEM 权限执行以下操作： 1. 查询目录 "C:\Users\AppData\Local\Temp\waapi-" 2. 如果发现任何目录，将进一步查询目录...

CVE-2022-3368

CVE-2022-3368 PoC for arbitrary file move vulnerability in Software Update component of Avira Security. Users have option to use this feature to update any outdated software on their PC ,when this feature is used Avira Security service will drop downloaded files in...

CVE_2022_0847

CVE20220847 CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability POC A Simple Proof of concept to get root shell. root@kitploit: $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...

CVE-2017-5123

CVE-2017-5123 PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR The waitid implementation in upstream kernels did not restrict the target destination to copy information results. This can allow local users to write to otherwise protected kernel memory, which can lead to privilege escalation...