gameoverlay

Gameoverlay shell code for privilege escalation root on UBUNTU. Ubuntu: 23.04 22.10 22.04 not v5.15.0 20.04 v.5.4.0 for 32629 18.04 v.5.4.0 for 32629 run with ./overlay.sh...

CVE-2021-3560

Polkit Vulnerability - CVE-2021-3560 📕 Introduction In 2021, a researcher named Kevin BackHouse discovered a privilege escalation vulnerability in the polkit utility. however, not all linux versions are vulnerable to polkit. Below is an example of a vulnerable version; Red Hat Enterprise Linux 8...

CVE-2025-31644

CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP The “file” parameter of the “save” command is vulnerable to a command injection attack, allowing an authenticated attacker with administrator privileges to the “/mgmt” web API or the SSH “tmsh” shell, to obtain remote code execution...

IoT-Vulnerability-Research-Public

Hardware Security & Vulnerability Research This repository serves as a centralized public archive for my independent vulnerability research, hardware audits, and Coordinated Vulnerability Disclosures CVD. All proof-of-concept scripts, firmware extractions, and hardware teardowns are published her...

pwnkit_safety_check

What is PwnKit PwnKit exploits a vulnerability in the SUID-root program /usr/bin/pkexec, allowing unprivileged users to gain full root privileges on Linux systems. This vulnerability has existed since 2009 and was publicly disclosed in January 2022. pwnkitsafetycheck.c PwnKit CVE-2021-4034 Safe...

CVE-2019-9624

CVE-2019-9624 Authenticated RCE for Webmin 1.9.0 Webmin 1.900 Authenticated RCE - CVE-2019-9624 Exploit 1. Vulnerability Description CVE-2019-9624 is an authenticated Remote Code Execution RCE vulnerability in Webmin versions up to 1.900. It allows an administrative user to execute arbitrary...

SUDO-privilege-escalation

SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...

CVE-2026-52832-PoC-exploit-nuclio-dashboard

CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard NOP mode accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root...

CVE-2025-63296

CVE-2025-63296 Summary KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and...

sendmail-clamav-exploit-CVE-2007-4560

Sendmail + ClamAV-Milter Exploit CVE-2007-4560 Python RCE exploit for Sendmail with ClamAV-Milter After successful exploitation: nc 1001 bash -i Tested On Sendmail 8.13.4/8.13.4/Debian-3sarge3 ClamAV-Milter 0.91.2 References Original exploit: https://www.exploit-...

CVE-2026-11318

CVE-2026-11318: Local Privilege Escalation in DeskIn macOS Client Vendor: DeskIn Product: DeskIn macOS Client Affected Versions: = v3.3.4.3 Overview A Local Privilege Escalation LPE vulnerability has been identified in the DeskIn macOS client. This vulnerability allows an unprivileged local user ...

CVE-2025-67888

CVE-2025-67888 Control Web Panel = 0.9.8.1208 admin/index.php OS Command Injection Vulnerability Affected Versions: Version 0.9.8.1208 and prior versions. Vulnerability Description: User input passed via the "key" GET parameter to /admin/index.php when the "api" parameter is set is not properly...

cve-2024-3400-panos_rce_reproduction

CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injection RCE CVSS 10.0 CRITICAL | CWE-78: OS Command Injection | Mass Exploited In The Wild Overview CVE-2024-3400 is a pre-authentication command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway interface...

CVE-2020-9470

What's this Wing FTP Server 6.2.5 - Privilege Escalation Introduction A weakness in the handling of HTTP sessions within Wing FTP Server allows any local user to escalate privileges to root on Linux, MacOS, and Solaris. Exploitation is contingent on an already-established administrative session. ...

CVE-2024-33775

CVE Discovered by: K. Wahab NeoX Vulnerability Details: Product: Nagios XI Version 2024R1.01 Vulnerability: Privilege Escalation from Users "NAGIOS" or "APACHE" Result: Full root access on the target system CVE: https://vulners.com/cve/CVE-2024-33775 Exploit: RSS Dashlet is used in this example...

DeepRoot

CVE-2021-3493 Comprehensive Exploit Framework $\colorFF4D2E \textbf\textsfDeepRoot$ OverlayFS Capability Privilege Escalation Framework - Red Team Professional Edition Overview DeepRoot framework is a comprehensive privilege escalation exploit for CVE-2021-3493 OverlayFS Privilege Escalation with...

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Description This project documents my penetration testing engagement as part of the CMIT 386 course at UMGC. It focuses on exploiting the Samba SMB usermapscript vulnerability CVE-2007-2447 on Metasploitable 2...

CVE-2019-14287-demo

CVE-2019-14287 Demo Container This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. This container can be run with: docker run -ti cashwilliams/cve-2019-14287-demo Configuration...

CVE-2026-14459-14460-pardus-software

Pardus Software Center — Local Privilege Escalation CVE-2026-14459 & CVE-2026-14460 Proof-of-concept and exploit-ready code for two local privilege escalation issues in the pardus-software package Pardus Software Center version 1.0.4 , both fixed in 1.0.5. CVE| Class| Summary| CVSS 3.1 CERT-TR...

cve-2024-32019-PoC

CVE-2024-32019 — Netdata ndsudo Local Privilege Escalation Summary Netdata’s ndsudo helper installed setuid root restricts which commands it will run, but resolves those commands using the caller’sPATH. In impacted versions, a local user can place a malicious binary earlier in PATH and have ndsud...