Audit-BlackBox-Web-to-Root

Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...

Cisco-CVE-2025-20281-illdeed

CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit This repository contains a Python 3 proof-of-concept exploit for CVE-2025-20281 , a critical vulnerability in Cisco Identity Services Engine ISE that allows unauthenticated remote code execution RCE as root via the ERS API. 🩻...

PUB-A-511003301

In getsecurebootmode of auth.rs, there is a possible way to bypass root signature verification via fault injection due to a logic error. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Fedora 43 : btrfs-backup-ng (2026-28cd8623c6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-28cd8623c6 advisory. Update to 0.9.20. This replaces the 0.9.19 update before it reached testing. It carries the 0.9.17 security fix GHSA-5xvm-66c9-p5ph, the 0.9.18 fix for...

openSUSE 16: gvfs / gvfs-backend-afc / gvfs-backend-goa / gvfs-backend-gphoto / etc (openSUSE-SU-2026:22174-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22174-1 advisory. This update for gvfs fixes the following issue: - CVE-2026-88924: gvfs-admin socket ownership race condition allows local users to change the ownership ...

PT-2026-134902

Name of the Vulnerable Software and Affected Versions Beam Cloud Beta9 Worker versions prior to 0.1.756 Description The Beta9 worker serves the sandbox file API from outside the container. The getHostPathFromContainerPath function converts a tenant's container path into a worker path. If the...

Fedora 43 : rust-webpki-root-certs / rust-webpki-roots (2026-eb6ed8d276)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-eb6ed8d276 advisory. Update webpki-roots / webpki-root-certs to version 1.0.11. These releases contain a followup fix for the eMudhra Intermediate CA Compromise. Tenable has...

Fedora 45 : rust-rustls-webpki / rust-webpki-root-certs / rust-webpki-roots (2026-ec2ce9d2ef)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ec2ce9d2ef advisory. - Update the rustls-webpki crate to version 0.103.16. - Update the webpki-roots and webpki-root-certs crates to version 1.0.11. This addresses security...

Fedora 45 : btrfs-backup-ng (2026-a44f471fef)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a44f471fef advisory. Update to 0.9.20. This replaces the 0.9.19 update before it reached testing. It carries the 0.9.17 security fix GHSA-5xvm-66c9-p5ph, the 0.9.18 fix for...

Fedora 44 : rust-webpki-root-certs / rust-webpki-roots (2026-6ceed7409a)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-6ceed7409a advisory. Update webpki-roots / webpki-root-certs to version 1.0.11. These releases contain a followup fix for the eMudhra Intermediate CA Compromise. Tenable has...

openSUSE 16 Security Update : perl-Mozilla-CA (openSUSE-SU-2026:22207-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22207-1 advisory. Changes in perl-Mozilla-CA: - updated to 20261020.0.0 20261020 20261020 - Update from Mozilla repository to 2026-10-20 - Denylisted certificates:...

CVE-2026-120307: beam-cloud Beta9 worker: The Beta9 worker serves the sandbox file API from outside the container

The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount at /tmp/.beta9, the remainder is joined onto that...

cdt-vulnsamba-deploy

CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...

CVE-2025-32463

CVE-2025-32463 🚨 Privilege escalation to root usingsudo chroot. No need for gcc installed. 🚀 What is CVE-2025-32463? CVE-2025-32463 is a Linux vulnerability that allows a local attacker to escalate privileges to root by abusing the sudo chroot command. Unlike similar exploits, this technique does...

vsftpd-234-backdoor

vsftpd 2.3.4 Backdoor Exploit A small, dependency-free Python 3 exploit for the vsftpd 2.3.4 backdoor CVE-2011-2523. It triggers the backdoor over FTP and drops you into an interactive root shell on the spawned listener. Written as a modern replacement for old exploit scripts which depended on...

CVE-2017-1000112-PoC

CVE-2017-1000112Buffer overflow download iso image from https://old-releases.ubuntu.com/releases/16.10/ubuntu-16.10-server-amd64.iso gcc exploit.c -o exploit got root...

sudo_patch_CVE-2025-32463

sudopatchCVE-2025-32463 Mr.CIA's manual patching guide for CVE-2025-32463 Sudo local privilege escalation tested on Kali Linux and Ubuntu WSL. CVE-2025-32463 Sudo Patch Guide 🛡️ Eish, CVE-2025-32463 is a nasty local privilege escalation flaw CVSS 9.3 in Sudo 1.9.14–1.9.17, exploitable via the...

CVE-2021-4034

Study Project CVE-2021-4034 PwnKit This repository contains the materials, code examples, and documentation for the study project within the elective module Applied IT Security about the security vulnerability CVE-2021-4034 , also known as PwnKit. Summary This study project within the elective...

POC-CVE-2026-0300-exploit

CVE-2026-0300 — PAN-OS User-ID Authentication Portal Buffer Overflow Exploit Critical CVSS 9.3 — Unauthenticated Remote Code Execution in Palo Alto Networks PAN-OS Captive Portal Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure Installatio...

CVE-2024-23108

CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order Command Injection Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances Blog Post Root cause and indicators of compromise here:...