CVE-2022-22639

Details See Blog: https://www.trendmicro.com/enus/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html Exploitation of CVE-2022-22639 1. Compile with command: clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime...

hazel-cve-2026-43499

Hazel Fire TV temporary root Temporary root exploit for the Amazon hazel Fire TV platform, based on CVE-2026-43499. The exploit is is intended for the ARM32 Linux 4.9 firmware shared by Hazel televisions from several manufacturers. Profiles currently cover firmware from PS7657.3645N through...

vsftpd-backdoor

Exploit for the vsftpd 2.3.4 Backdoor CVE-2011-2523 This exploit takes advantage of a backdoor in version 2.3.4 of the vsftpd FTP service. The backdoor was maliciously introduced into the source code and allows remote command execution as root on the affected server How it works The backdoor is...

CVE-2021-4034

CVE-2021-4034 pkexec The use of this python script exploits the vulnerability in the pkexec file to gain root access without providing credentials · Detects if the binary has SUID privileges, in which case it is vulnerable usuario@gatogamer $ ls -la /usr/bin/pkexec .rwsr-xr-x 1 root root...

ip-camera-research

IP Camera Research - Fullhan FH8626V100 AJL30PG0803 Security research on a consumer IP camera built on the Fullhan FH8626V100 SoC model AJL30PG0803, resulting in six assigned CVEs covering unauthenticated API access, plaintext credential disclosure, and full unauthenticated device compromise via ...

CoreTrustDemo

Demo for Linus Henze's CoreTrust bug CVE-2022-26766, CoreTrust allows any root certificate See https://worthdoingbadly.com/coretrust/ for usage...

Lenovo-TB365FC-GhostLock-CVE-2026-43499

GhostLock for Lenovo TB365FC Root for ZUXOS / Android 16 via CVE-2026-43499 rtmutex removewaiter use-after-free plus a DirtyPipe credential patch. Loads a KernelSU LKM without unlocking the bootloader or flashing. Root is lost on reboot. Firmware: ZUXOS 1.5.10.178 Kernel:...

CVE-2024-32019_poc

Privilege Escalation via ndsudo Netdata Local Exploit This is an alternative POC to exploit a vulnerable ndsudo utility bundled with Netdata to perform a local privilege escalation. The exploit works by adding the script inside the user’s PATH substituting an allowed command nvme by ndsudo and...

CVE-2023-38035

CVE-2023-38035 POC for CVE-2023-38035 affecting Ivanti Sentry Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive Summary This POC abuses an unauthenticated command...

CVE-2020-0041

CVE-2020-0041 This repository contains LPE code for exploiting CVE-2020-0041 implemented by bluefrostsecurity as released at https://github.com/bluefrostsecurity/CVE-2020-0041/tree/master/lpe . The exploitation approach for this part can be found at...

CVE-2025-32463

📌 CVE-2025-32463 — Sudo --chroot Local Privilege Escalation ExploitDB ID: 52352 🧠 Overview This repository documents a critical local privilege escalation LPE vulnerability affecting Sudo versions 1.9.14 – 1.9.17. The vulnerability arises from an incorrect implementation of the sudo -R --chroot...

CVE-2026-38577

CVE-2026-38577 — Tenda HG21 Hardcoded Root Credentials Summary Field| Value ---|--- CVE ID| CVE-2026-38577 Vendor| Tenda Product| Tenda HG21 XPON Fiber Modem Affected Version| V4.0.0-260302 Product Key| HG21-V1.0-TDE01 Hardware Version| V1.0 Firmware Build Date| 2026-03-02 Firmware File|...

MagiskEoP

Introduction This is an exploit for a vulnerability CVE-2024-48336 in Magisk app that allows a local app to silently gain root access without user consent. Vulnerability was initially reported by @vvb2060 and PoC-ed by @canyie. It has been fixed in Canary 27007. Demo video for exploit this...

CVE-2024-24402

Vulnerability Report CVE Disovered by: Jarod Jaslow MAWK Vulnerability Details: Endpoint: Nagios XI Version 2024R1.01 Vulnerability Type: Privilege Escalation from User "NAGIOS" Exploitation Result: Full root access on the target system Steps to Reproduce: 1. Create a Fresh Instance of Nagios XI...

CVE-2020-11651

CVE-2020-11651 PoC for CVE-2020-11651 Requires Python3 tested on 3.8 python3.8 -m pip install pyzmq msgpack ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP or Host optional...

SNP-Assignment

SNP-Assignment Exploit work Privilege Escalation CVE-2017-1000112 as the privilege escalation is the mile stone of an attakers view,i try to do a little research on loval privilege escalation which is the basic step of whole privilege escalation unit. while im reading some articles 2016 and 2017...

GhostLock

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

tpwn-bis

tpwn-bis simple poc for cve-2015-5932 / cve-2015-5847 / cve-2015-5864 now escalates to root and spawns a shell. a big thanks to @qwertyoruiop for original code and help!...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Basic Information Vulnerability ID: CVE-2023-22809 Vulnerability Level: High Vulnerability Score: 7.8 Affected Versions: sudo 1.8.0 - sudo 1.9.12p1 sudo = 1.8.0 or sudo = 1.9.12p1 Attack Effect: Local Privilege Escalation Attack Method Modify root username in...

CVE-2026-24061-setup

CVE-2026-24061 Setup This repository contains the Docker setup for CVE-2026-24061. Once you have installed Docker, just do the following: 1. Clone this repository. 2. Run the following command: sudo docker build . --tag telnetd-auth-bypass 3. Once the docker image is built, we can start the...