CVE-2024-22026

CVE-2024-22026 POC de exploit para CVE-2024-22026 que afecta a Ivanti EPMM "MobileIron Core" CVE-2024-22026 es una vulnerabilidad de escalada de privilegios local en las versiones del servidor Ivanti EPMM anteriormente MobileIron anteriores a 12.1.0.0, 12.0.0.0 y 11.12.0.1. Esta vulnerabilidad...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection Vendor Description A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute...

TerraMaster-TOS-CVE-2020-15568

TerraMaster TOS CVE-2020-15568 Repositorio para el módulo de Metasploit CVE-2020-15568 Aplicación vulnerable Descripción Existe una vulnerabilidad de invocación dinámica de métodos de clase en el archivo include/exportUser.php que permite ejecutar comandos remotos en dispositivos TerraMaster con...

CVE-2021-4034

Information Exploit Title: Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Date: 01/25/2022 Exploit Author: Qualys Research Team Tested on: ubuntu 20.04.1 LTS CVE ID: CVE-2021-27928 How to Exploit Test Environment： Step 1：build the expFrom https://github.com/berdav/CVE-2021-4034 make...

CVE-2023-20887

CVE-2023-20887 POC para CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight RCE no autenticado Análisis Técnico Se puede encontrar un análisis de causa raíz de la vulnerabilidad en mi blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887/...

ROOT-OS-DEBIAN-12-CVE-2026-42767 CVE-2026-42767 in openssl - Patched by Root

Root has patched CVE-2026-42767 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-75803 CVE-2026-75803 in openssl - Patched by Root

Root has patched CVE-2026-75803 in the openssl package for Root:Debian:12. Multiple fixed versions available...

PSSRoot

Programa One-Click-Root basado en CVE-2016-5195 o "DirtyCOW"; esto debería funcionar con los dispositivos PlayStation Certified, pero también puede ser útil para otros dispositivos Android antiguos; Probado en : Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel...

CVE-2025-54322

CVE-2025-54322 - Escáner de RCE Pre-Auth para XSpeeder SXZOS Un escáner de vulnerabilidades multihilo para CVE-2025-54322, una vulnerabilidad de ejecución remota de código no autenticada en el firmware XSpeeder SXZOS que afecta a más de 70.000 hosts a nivel mundial. 📋 Tabla de Contenidos Acerca d...

CVE-2024-23334-PoC

CVE-2024-23334-PoC Una prueba de concepto de la vulnerabilidad LFI en aiohttp 3.9.1. La opción 'followsymlinks' puede usarse para determinar si se deben seguir enlaces simbólicos fuera del directorio raíz estático. Cuando 'followsymlinks' se establece en True, no hay validación para verificar si ...

fire-hd-ownership

fire-hd-ownership Owning the tablet I already bought. In November 2022 I bought a Fire HD 10 11th gen, 2021 model on eBay for $114.26 to be a Home Assistant kiosk. It ran fine for years, then started powering itself off. The logs said why: Amazon's own software was issuing the shutdowns, and the...

CVE-2026-58048-PoC-Exploit

💥 CVE‑2026‑58048 – cPanel Root SQL Execution Toolkit ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse...

CVE-2026-64600-Refluxfs-PoC

RefluXFS CVE-2026-64600 PoC This repo contains a PoC of the recently discovered race condition vulnerability affecting COW on XFS reported by the excellent Qualys Security Team. 1 2 PoC info Handwritten based off of the excellent analysis in the Qualys advisory. Rewrites the first 4KB of the...

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 inyectar un exploit de root como instalación silenciosa para realizar una tarea maliciosa en el dispositivo. Vulnerabilidad AndroRAT no se centra en atacar a un usuario específico, sino que trabaja para ganarse la confianza de...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...

cisco-CVE-2023-20009

Acerca de Investigador de seguridad: ly1g3, ly1g3attuta.io Huella GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Resumen: Ejecución remota de código - RCE desde archivo de configuración CVE: CVE-2023-20009 Cronología: Descubierto - ly1g3 Reportado -...

Code-27-Companion-Hub-Exploits

Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...

ROOT-OS-DEBIAN-13-CVE-2026-3184 CVE-2026-3184 in util-linux - Patched by Root

Root has patched CVE-2026-3184 in the util-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-78409 CVE-2026-78409 in util-linux - Patched by Root

Root has patched CVE-2026-78409 in the util-linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-76461

⚡ CVE-2026-76461 - Critical SQL Injection A critical, remotely exploitable SQL injection vulnerability in Cisco Secure Email Gateway's email parsing...