CVE-2021-25741

Acerca de Es un exploit para la vulnerabilidad CVE-2021-25741. Esta vulnerabilidad permite montar el sistema de archivos de Node dentro de un nuevo POD con privilegios de lectura y escritura. Puedes leer más sobre la vulnerabilidad aquí:...

PT-2026-89732

It was discovered that libEBML incorrectly handled certain read and write operations. An attacker could possibly use this issue to cause a buffer overflow, resulting in a denial of service...

qu1ckr00t

qu1ckr00t Una aplicación de PoC que demuestra el poder de un R/W arbitrario del kernel de Android CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t es una PRUEBA DE CONCEPTO. NO debe usarse en tu dispositivo personal con datos de usuario...

CVE-2026-85788

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as...

EUVD-2026-75104

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as...

CVE-2026-50181

CVE-2026-50181 Recorrido de directorios en las herramientas de archivo de Langroid permitía lectura/escritura fuera del directorio actual configurado. Aviso principal: GHSA-fg23-3346-88f5 Base de datos de avisos de GitHub: github.com/advisories/GHSA-fg23-3346-88f5 Crédito al investigador:...

ZDI-CAN-16318

Exploits for CVE-2023-32162 ZDI-CAN-16318 0-day Here you can find my Local Privilege Escalation Vulnerability report. Here you can find my Arbitrary File Read Vulnerability report. Here you can find my Arbitrary File Read\Write Vulnerability report. Here you can buy me a unicorn 🦄 Share the...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Este programa es un exploit para cve-2018-8453. Plataforma de desarrollo/pruebas: x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 Nota: utiliza Palette para leer y escribir el kernel Declaración importante: esta herramienta se utiliza únicamente para...

CVE-2022-23222

CVE-2022-23222 Análisis en chino: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt Solo con fines educativos/de investigación. Úselo bajo su propio riesgo. Compilar y ejecutar root@kitploit: $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps'...

CVE-2021-1961

Código de explotación para CVE-2021-1961. El análisis completo está disponible en mi blog. Para compilar el exploit, ejecuta ndk-build del Android NDK. Para ejecutar el exploit, necesitas tener acceso a /dev/qseecom, lo que implica tener el usuario/grupo correcto y el contexto SELinux adecuado...

CVE-2023-35001

nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage root@kitploit: Build $ make Run $ ./exploit This produces a...

CVE-2026-28624

In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58941

CVE-2026-58941 affects multiple functions in iommu.c of the Android kernel . The root cause is an out-of-bounds read/write due to improper input validation, enabling local escalation of privilege with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with high...

CVE-2026-58848

CVE-2026-58848 affects multiple functions in alloc.c within the Android kernel , where a race condition permits unauthorized read/write access. An attacker with local, low privileges can exploit this to achieve local escalation of privilege without user interaction. The vulnerability is rated CVS...

CVE-2026-28624

CVE-2026-28624 is a confused deputy vulnerability in the Android platform that allows read/write access to files without proper permissions , enabling local escalation of privilege with no additional execution privileges and no user interaction. It carries a CVSS 3.1 score of 7.8 (HIGH) with high...

cve-2019-2215_SH-M08

Esta es una versión para AQUOS sense 2SH-M08 del código de prueba de concepto que obtiene privilegios root en dispositivos Android con parches de seguridad anteriores a octubre de 2019. Entorno de ejecución Se ha confirmado el funcionamiento con las siguientes versiones del SO. Si desea ejecutarl...

CVE-2024-5274

CVE-2024-5274 authors: @mistymntncop, @buptsb Shoutout to @buptsb for his major contribution of discovering both the DCHECK bytecode mismatch POC and then discovering how to elevate that primitive to more powerful OOB read/write primitives. Without him this exploit would not be possible :- based ...

lenovo-dispatcher-poc

Lenovo Dispatcher PoC Este es un concepto básico de prueba para explotar el controlador dispatcher de Lenovo LnvMSRIO.sys CVE-2025-8061. Vulnerabilidades encontradas por Luis Casvella fuente: https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html. La idea principal de este PoC es...

CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC

PoC de escalada de privilegios local en Symantec Encryption Desktop PGPwded.sys Este repositorio contiene una prueba de concepto para una vía de escalada de privilegios local en el filtro de almacenamiento PGPwded.sys de Symantec Encryption Desktop, basada en una primitiva de lectura/escritura...

Symlink Attack

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...