CVE-2013-2094

CVE-2013-2094 Linux 2.6.32/2.6.37 - 3.8.10 PERFEVENTS local root x86/x8664 without backconnect...

CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-

This repository does not have a README...

pywhisker

pyWhisker pyWhisker is a Python equivalent of the original Whisker made by Elad Shamir and written in C. This tool allows users to manipulate the msDS-KeyCredentialLink attribute of a target user/computer to obtain full control over that object. It's based on Impacket and on a Python equivalent o...

CVE-2020-24028

CVE-2020-24028 Description ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Insecu...

CVE-2025-55287-POC

CVE-2025-55287-POC Authenticated Stored Cross-Site Scripting XSS in Genealogy app prior to 4.4.0 allows arbitrary JavaScript execution and privilege escalation from Editor+ role to Administrator. Summary Vulnerability type: Stored Cross-Site Scripting CWE-79 Affected component: 'Person' firstname...

K0mraid3s-System-Shell-PREBUILT

K0mraid3s-System-Shell Way back in 2019, a vulnerability that would come to be known as "CVE-2019-16253" was found that affect Samsung's TTS engine in versions prior to 3.0.02.7. This exploit allowed for a local attacker to escalate privileges to system privileges and was later patched by Samsung...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server Elevation of Privilege CVE-2023-29357 Exploitation CVE-2023-29357 is a critical privilege escalation vulnerability that, when combined with other vulnerabilities, could potentially lead to remote code execution. The CVSS score for this vulnerability is 9.8...

BloodHound-Tools

What is this? A collection of tools that integrate to BloodHound. Bloodhound is the defacto standard that both blue and red security teams use to find lateral movement and privilege escalation paths that can potentially be exploited inside an enterprise environment. A typical environment can yiel...

iovyroot

iovyroot A root tool based on the CVE-2015-1805 vulnerability It supports 32 and 64bit but requires absolute kernel addresses see offsets.c poc was done by idler1984 https://github.com/idl3r/testcode...

SysmonEoP

SysmonEoP Proof of Concept for arbitrary file delete/write in Sysmon CVE-2022-41120/CVE-2022-44704 Vulnerability Vulnerability is in code responsible for ClipboardChange event that can be reached through RPC. Local users can send data to RPC server which will then be written in C:\Sysmon director...

reverse-shell

reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...

CVE-2025-32583

🚨 CVE-2025-32583 — WordPress PDF 2 Post RCE Exploit CRITICAL Vulnerability CVE-ID: CVE-2025-32583 Severity: 9.9 CRITICAL CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 📖 Description A vulnerability in the PDF 2 Post WordPress plugin developed by termel allows Remote Code Inclusion RCE...

CVE-2022-1329

CVE-2022-1329 🦠 Project developed by Agustín Sánchez Martín and Enrique Sánchez-Migallón Ochoa for the subject of Security in Computer Systems taught by Sebastián Reyes Ávila at the Higher School of Computer Science of Ciudad Real. This project contains the documentation and steps necessary to...

CVE-2026-74939-escape-the-mac-n-cheese-box

CVE-2026-74939 — Firefox content→parent privilege escalation Proof of concept for a sandbox escape in Firefox 149.0a1 nightly 2fbc0748c4, pre-fix. A compromised content process forges an IPDL message that makes the parent load a page into a privileged privilegedabout process. This is the stage-2...

CVE-2022-34918-LPE-PoC

CVE-2022-34918 LPE PoC LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic You can find the associated write-up on our blog Usage getroot should be in the current folder $ ls getroot poc $ ./poc License Copyright 2022, RandoriSec...

CVE-2025-32463

CVE-2025-32463 Sudo chroot Elevation of Privilege Affects Sudo versions 1.9.14 to 1.9.17. CVE-2025-32463 was introduced in Sudo v1.9.14 June 2023 with the update to the command matching handling code when the chroot feature is used...

CVE-2023-20198

🔍 Cisco IOS XE Web UI Vulnerability Scanner - CVE-2023-20198 🚨 🚫 Critical Risk | CVSS: 10.0 | 📅 Updated: Oct 17, 2023 Overview: A swift and powerful scanner for detecting critical vulnerabilities in the web UI of Cisco IOS XE Software. Protect your system from unauthorized level 15 access, puttin...

patch-CVE-2026-19843

Patch: CVE-2026-19843 Vulnerability Details CVE : CVE-2026-19843 Product : Cisco IOS XE Description : Privilege escalation via web UI Severity : High Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-06-15 Status| deployed Deployed To| Production Validated By| SecOps Team References NV...

Windows_AFD_LPE_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f 复现文章:hlingxbm For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: WindowsAFDLPECVE-2023-21768.exe where is the process ID in...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automated exploitation of CVE-2022-26923 Certifried , enabling privilege escalation through abuse of Active Directory Certificate Services AD CS, with an automatic fallback to Resource-Based Constrained Delegation RBCD, ultimately dumping the NTLM...