73925 matches found
exploit-CVE-2021-3560
Exploit for CVE-2021-3560 Polkit - Local Privilege Escalation Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description It was found that polkit could be tricked into bypassing the...
CVE-2018-18852
CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/andripwn, @andripwn on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/andripwn/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100...
Zero-Day-Legacy
🎓 Proyecto de Graduación — Universidad Nacional de Ajloun UNA Facultad de TI · Ciberseguridad y Computación en la Nube · Año Académico 2026 🏆 Nota más alta de la universidad: 97% 📖 Descripción General Zero-Day Legacy es una máquina de laboratorio Boot-to-Root CTF Capture The Flag realista e...
CVE-2024-22026
CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...
CVE-2024-3400
CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection Vendor Description A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute...
TerraMaster-TOS-CVE-2020-15568
TerraMaster TOS CVE-2020-15568 Repositorio para el módulo de Metasploit CVE-2020-15568 Aplicación vulnerable Descripción Existe una vulnerabilidad de invocación dinámica de métodos de clase en el archivo include/exportUser.php que permite ejecutar comandos remotos en dispositivos TerraMaster con...
CVE-2021-4034
Information Exploit Title: Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Date: 01/25/2022 Exploit Author: Qualys Research Team Tested on: ubuntu 20.04.1 LTS CVE ID: CVE-2021-27928 How to Exploit Test Environment： Step 1：build the expFrom https://github.com/berdav/CVE-2021-4034 make...
CVE-2023-20887
CVE-2023-20887 POC para CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight RCE no autenticado Análisis Técnico Se puede encontrar un análisis de causa raíz de la vulnerabilidad en mi blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887/...
ROOT-OS-DEBIAN-12-CVE-2026-42767 CVE-2026-42767 in openssl - Patched by Root
Root has patched CVE-2026-42767 in the openssl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-75803 CVE-2026-75803 in openssl - Patched by Root
Root has patched CVE-2026-75803 in the openssl package for Root:Debian:12. Multiple fixed versions available...
PSSRoot
Programa One-Click-Root basado en CVE-2016-5195 o "DirtyCOW"; esto debería funcionar con los dispositivos PlayStation Certified, pero también puede ser útil para otros dispositivos Android antiguos; Probado en : Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel...
CVE-2024-23334-PoC
CVE-2024-23334-PoC Una prueba de concepto de la vulnerabilidad LFI en aiohttp 3.9.1. La opción 'followsymlinks' puede usarse para determinar si se deben seguir enlaces simbólicos fuera del directorio raíz estático. Cuando 'followsymlinks' se establece en True, no hay validación para verificar si ...
fire-hd-ownership
fire-hd-ownership Owning the tablet I already bought. In November 2022 I bought a Fire HD 10 11th gen, 2021 model on eBay for $114.26 to be a Home Assistant kiosk. It ran fine for years, then started powering itself off. The logs said why: Amazon's own software was issuing the shutdowns, and the...
Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805
Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 inject a root exploit as a silent installation to perform a malicious task on the device. Vulnerability AndroRAT does not focus on targeting a specific user but rather works to acquire the confidence of the entire network...
sudo-snooper
sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...
cisco-CVE-2023-20009
Acerca de Investigador de seguridad: ly1g3, ly1g3attuta.io Huella GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Resumen: Ejecución remota de código - RCE desde archivo de configuración CVE: CVE-2023-20009 Cronología: Descubierto - ly1g3 Reportado -...
Code-27-Companion-Hub-Exploits
Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...
ROOT-OS-DEBIAN-13-CVE-2026-78409 CVE-2026-78409 in util-linux - Patched by Root
Root has patched CVE-2026-78409 in the util-linux package for Root:Debian:13. Multiple fixed versions available...