79231 matches found
CVE-2024-3400-poc
CVE-2024-3400 Vulnerability PoC Proof of Concept Vulnerability Description CVE-2024-3400 is a command injection vulnerability in Palo Alto firewall systems. By crafting a malicious HTTP request, an attacker can execute arbitrary commands on the target server and even gain root privileges...
cve-2019-7192-check
QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Checker Usage: pip install requests ./CheckerforQNAPRCEcve2019719295.py /path/to/ip-port.txt Example file input: 1.2.3.4 8080 2.3.4.5 443 This tool takes a list of QNAP NASes' IPs and ports, and it tells if each device is vulnerable to the...
cve-2019-14514
CVEID : CVE-2019-14514 Name of the affected products and versions : Microvirt MEmu all versions prior to 7.0.2 Problem type : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' Summary MEmu is an Android emulator for Windows. During our tests, we have...
ROOT-APP-NPM-GHSA-F897-62HF-6GXQ GHSA-f897-62hf-6gxq in @modelcontextprotocol/sdk - Patched by Root
Root has patched GHSA-f897-62hf-6gxq in the @modelcontextprotocol/sdk package for Root:npm. Multiple fixed versions available...
dirtyCow
Dirtycow also known as CVE-2016-5195 and it's very populer vulnerability of past time. First of all choose the fitted Linux version for that vulnerability. then install or run it on VBOX or VMWare . after install it follow those instructions. 1. Create a user without having root access. 2. Log in...
CVE-2023-1389
Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...
DIR8xx_PoC
phpcgi phpcgi is responsible for processing requests to .php, .asp and .txt pages. Also, it checks whether a user is authorized or not. Nevertheless, if a request is crafted in a proper way, an attacker can easily bypass authorization and execute a script that returns a login and password to a...
LARE
LARE L ocal A uto R oot E xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity. The script is useful in a scenario where your victim machine do not have an internet connection eg. while yo...
CVE-2019-8781-macOS
CVE-2019-8781 Security Advisory CVE-2019-8781 POC Details The POC elevate the process to root and execute a shell. Exploit environment - macOS 10.14.6 18G95 Should works on all macOS version that's released before 10.15.0 - SMEP: On - SMAP: Off - Kernel ASLR slide passed to the argv1 Building You...
CVE-2024-23108
CVE-2024-23108 POC Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances. I just quickly added the option to supply a list and added some coloring. The orginal and all the cred goes to horizon3 see blog post below Blog Post Root cause and indicators of...
CVE-2019-3396_EXP
CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、put the cmd.vm on your website must use ftp or https ,http doesn't work 2、modify RCEexp.py ，change the filename = 'ftp://1.1.1.1/cmd.vm' （python -m pyftpdlib -p 21） 3、python RECexp.py http://test.wikitest.cc:8080 "whoami" $ python RECexp.py...
CVE-2014-7911-CVE-2014-4322_get_root_privilege
CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: andy website: https://blog.csdn.net/koozxcv how to build Import the project into eclipse,and build. bug info http://seclists.org/fulldisclosure/2014/Nov/51 analysis...
CVE-2022-0435-Poc
CVE-2022-0435stack overflow wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso mkdir kernel wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic5.13.0-051300.202106272333amd64.deb wget...
tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE
Tugtainer v1.30.2 RCE The RCE is obtained by abusing 2 vulnerabilities CVE-2026-55494 CVE-2026-62308 In short, a SSRF vulnerability is abused to call to an unauthenticated service in the internal network to create a docker that shares the same pid with tugtainer, thus making the file system of th...
CVE-2024-32019-ndsudo-local-privilege-escalation-NetData
CVE-2024-32019 Proof of Concept Python A Python implementation of the Local Privilege Escalation LPE exploit for Netdata CVE-2024-32019. This script exploits a vulnerability in the ndsudo component where the PATH environment variable is not properly sanitized. This allows a local attacker to...
Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow
Privilege-Escalation-using-the-Dirty-Cow-Kernel-Exploit This project aims to practically demonstrate the operation of the Dirty COW exploit CVE-2016-5195, a critical vulnerability in the Linux kernel. It simulates a realistic scenario in which an attacker with limited local access to an unpatched...
CVE-2021-3156-plus
CVE-2021-3156 This is a warehouse modification based on @CptGibbon and supports arbitrary command execution. 相关阅读：CVE-2021-3156 - Exploit修改 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on : @CptGibbon Ubuntu 20.04 against sudo 1.8.31 @Rvn0xsy Ubuntu 17.10 Al...
CVE-2025-32463-POC
CVE-2025-32463 – Sudo chroot Privilege Escalation PoC This repository contains a proof-of-concept PoC exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. The vulnerability allows a local unprivileged user to escalate privileges to root by...
CVE-2024-6387-analysis
CVE-2024-6387 OpenSSH Signal Race Condition Vulnerability Analysis Vulnerability Overview CVE-2024-6387 is a signal handling race condition vulnerability in OpenSSH versions 8.5p1 through 9.7p1, known as "regreSSHion". An attacker can continuously attempt within 6-8 hours to execute arbitrary cod...