CVE-2022-20186

Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

lpe-toolkit

Kit de Escalada de Privilegios Local para Linux Kit de herramientas de escalada de privilegios multiarquitectura con 24 exploits amd64 precompilado; otras arquitecturas compiladas mediante gcc en tiempo de ejecución. Soporta amd64, arm64, 386, mips, mipsle, mips64, y mips64le. Detecta la versión...

exploit_CVE-2021-3560

CVE-2021-3560 Exploit Script This script exploits CVE-2021-3560, a vulnerability in polkit that allows privilege escalation to root. Usage After cloning the repository, grant execution permissions and run the script: chmod +x exploit.sh ./exploit.sh Expected Outcome After running the script, a ne...

pentest-writeups

pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Penetration Testing Writeup Author: Amirbek Raxmatullayev @americo444 Date: 2026-06-17 Platform: VulnHub Difficulty: Beginner Objective: Gain root access 1. Environment Setup Component| Details ---|---...

cve-2017-12945

CVE-2017-12945 Exploit for CVE-2017-12945 A remote authenticated blind OS command injection vulnerability exists in Mersive Solstice Pods - a wireless collaboration and presentation platform designed by Mersive Technologies Inc. - running versions of the firmware prior to 2.8.4, as...

CVE-2024-24402

Vulnerability Report CVE Disovered by: Jarod Jaslow MAWK Vulnerability Details: Endpoint: Nagios XI Version 2024R1.01 Vulnerability Type: Privilege Escalation from User "NAGIOS" Exploitation Result: Full root access on the target system Steps to Reproduce: 1. Create a Fresh Instance of Nagios XI...

yersinia

Árbol de expansión 1: Ataque DoS enviando BPDUs de configuración ¡Enviemos algunos BPDUs de configuración afirmando ser la raíz!!! Al enviar continuamente BPDUs de configuración con root pathcost 0, ID de puente generado aleatoriamente y por lo tanto el mismo ID raíz, y algunos valores...

exploit-CVE-2021-3560

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalation Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description It was found that polkit could be tricked into bypassing the...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/andripwn, @andripwn on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/andripwn/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100...

Zero-Day-Legacy

🎓 Graduation Project — Ajloun National University ANU Faculty of IT · Cybersecurity and Cloud Computing · Academic Year 2026 🏆 Highest Grade in the University: 97% 📖 Overview Zero-Day Legacy is a realistic, intentionally vulnerable Boot-to-Root CTF Capture The Flag lab machine built as a graduati...

CVE-2024-22026

CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection Vendor Description A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute...

TerraMaster-TOS-CVE-2020-15568

TerraMaster TOS CVE-2020-15568 Repository for CVE-2020-15568 Metasploit module Vulnerable Application Description A dynamic class method invocation vulnerability exists in file include/exportUser.php which leads to executing remote commands on TerraMaster devices with root privileges. The...

CVE-2021-4034

Information Exploit Title: Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Date: 01/25/2022 Exploit Author: Qualys Research Team Tested on: ubuntu 20.04.1 LTS CVE ID: CVE-2021-27928 How to Exploit Test Environment： Step 1：build the expFrom https://github.com/berdav/CVE-2021-4034 make...

CVE-2023-20887

CVE-2023-20887 POC for CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight unauthenticated RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887/ Summary...

ROOT-OS-DEBIAN-12-CVE-2026-42767 CVE-2026-42767 in openssl - Patched by Root

Root has patched CVE-2026-42767 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-75803 CVE-2026-75803 in openssl - Patched by Root

Root has patched CVE-2026-75803 in the openssl package for Root:Debian:12. Multiple fixed versions available...

PSSRoot

One-Click-Root program based on CVE-2016-5195 or "DirtyCOW"; this should work with the PlayStation Certified devices, but it may come in handy for other old android devices too; Tested on : Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel 3.4.0+1.0.21100-313065 Sony Tablet ...

CVE-2024-23334-PoC

CVE-2024-23334-PoC A proof of concept of the LFI vulnerability on aiohttp 3.9.1. The option 'followsymlinks' can be used to determine whether to follow symbolic links outside the static root directory. When 'followsymlinks' is set to True, there is no validation to check if reading a file is with...

fire-hd-ownership

fire-hd-ownership Owning the tablet I already bought. In November 2022 I bought a Fire HD 10 11th gen, 2021 model on eBay for $114.26 to be a Home Assistant kiosk. It ran fine for years, then started powering itself off. The logs said why: Amazon's own software was issuing the shutdowns, and the...