vsFTP-2.3.4-Remote-Root-Shell-Exploit

vsFTP 2.3.4 Exploit de Shell Root Remota Un programa simple en Python que obtiene una Shell Root Remota en el Dispositivo Objetivo explotando una Vulnerabilidad CVE-2011-2523 presente en vsFTP 2.3.4 Requisitos Lenguaje usado = Python3 Módulos/Paquetes usados: socket os pexpect paramiko getpass...

CVE-2025-32463_POC

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. Contents File| Purpose ---|--- Dockerfile| Builds an Ubuntu 24.04 image with vulnerable sudo 1.9.16p2 and...

Dirtypipe-exploit

Dirtypipe-exploit Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn. a root shell. and attempts to restore the damaged binary as well...

cve-2016-0728-testbed

CVE-2016-0728 testbed This repository contains a test program for CVE-2016-0728, a refcount leak and overflow bug in Linux, that leads to a use-after-free. The bug was found and explained by Perception Point. I am not affiliated to them. Usage Welcome to the CVE-2016-0728 testbed sizeofstruct...

CVE-2016-6662

CVE-2016-6662 From SQL injection to root shell with CVE-2016-6662 by MaYaSeVeN Proof of Concept: https://www.youtube.com/watch?v=lyc7GFE3q2U...

CVE-2022-37706

CVE-2022-37706 The CVE-2022-37706 vulnerability is related to the Enlightenment window manager, specifically the enlightenmentsys binary. This binary has the SUID Set User ID bit enabled, meaning it can be executed with elevated privileges usually as the root user. Summary: Vulnerability :...

CVE-2018-20162-digi-lr54-restricted-shell-escape

layout: post title: "CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape" author: sgo category: security The Digi TransPort LR54 is a high speed LTE router commonly used by industry, infrastructure, retail and public transportation. It supports running python scripts in a restricted...

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Description This project documents my penetration testing engagement as part of the CMIT 386 course at UMGC. It focuses on exploiting the Samba SMB usermapscript vulnerability CVE-2007-2447 on Metasploitable 2...

CVE-2026-14459-14460-pardus-software

Pardus Software Center — Local Privilege Escalation CVE-2026-14459 & CVE-2026-14460 Proof-of-concept and exploit-ready code for two local privilege escalation issues in the pardus-software package Pardus Software Center version 1.0.4 , both fixed in 1.0.5. CVE| Class| Summary| CVSS 3.1 CERT-TR...

CVE-2025-65731

CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...

CVE-2022-0847-DirtyPipe-Exploit

CVE-2022-0847-DirtyPipe-Exploit What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of...

CVE-2023-34039

CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Static SSH key RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ Summary VMWa...

Poison-HTB-Report

Poison-HTB-Report Privilege Escalation on HTB "Poison" using PwnKit CVE-2021-4034 HTB "Poison" - Privilege Escalation Report BugVex This repository contains a full vulnerability report on the Hack The Box machine Poison. 🔍 Exploit Summary CVE: CVE-2021-4034 PwnKit Technique: Privilege escalation...

aziot-cctv-cve-2025-50777

aziot-cctv-cve-2025-50777 CVE-2025-50777: Root Access and Plaintext Credential Exposure in AZIOT Smart CCTV Summary A local access control vulnerability CVE-2025-50777 has been identified in the firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera Firmware Version V1.00.02. Thi...

vsftpd-2.3.4---Backdoor-Command-Execution

vsftpd-2.3.4---Backdoor-Command-Execution vsftpd 2.3.4 CVE-2011-2523 a critical vulnerability that leads to Root Shell. In this repo I will do a PoC of how to exploit it step by step, Manually & Automatically Python for educational purposes. What is the vulnerability about ? Firstlly, it is a...

NimbusPWN-CVE-2022-29799-29800

NimbusPwn — networkd-dispatcher !NOTE Other distros: dnf install gcc dbus-devel pkgconf Fedora/RHEL or pacman -S gcc dbus pkgconf Arch...

cve-2026-1668-poc

Proof-of-concept exploit for CVE-2026-1668 This is a proof-of-concept exploit for CVE-2026-1668. It is intended purely for educational purposes only. Please do not attempt to exploit systems that you do not own or do not have explicit permission to exploit. This proof-of-concept was developed...

CVE-2023-22809-sudoedit-privesc

CVE-2023-22809 sudo Privilege escalation Affected sudo versions: 1.8.0 to 1.9.12p1 This script automates the exploitation of the CVE-2023-22809 vulnerability to gain a root shell. The script checks if the current user has access to run the sudoedit or sudo -e command for some file with root...

CVE-2026-24061

Telnet Vulnerability Scanner & Exploiter This Python script main.py is a multi-threaded tool designed to scan a list of target IPs/hostnames and attempt to exploit a specific vulnerability over Telnet. !WARNING This tool is intended for educational purposes and authorized penetration testing only...

docker-POC_CVE-2024-1086

https://github.com/Notselwyn/CVE-2024-1086 usage docker compose up -d --build docker exec -it poccve20241086 bash test sample tester@e23a4e5757d9 CVE-2024-1086$ id uid=99999tester gid=99999tester groups=99999tester tester@e23a4e5757d9 CVE-2024-1086$ cat /etc/shadow cat: /etc/shadow: Permission...