77940 matches found
CVE-2026-67401
CVE-2026-67401 SQL injection in cPanel EmailTrack. Authenticated cPanel user with mail privileges writes arbitrary files as root via SQLite ATTACH DATABASE. One request to root. Haven't tested on a real target, code is only put together from public information and basic diff'ing. Do your due...
ROOT-APP-GOBINARY-CVE-2025-22868 CVE-2025-22868 in golang.org/x/oauth2 - Patched by Root
Root has patched CVE-2025-22868 in the golang.org/x/oauth2 package for Root:Go. Multiple fixed versions available...
CVE-2016-5640
CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit Module Module for exploiting a Remote Command Injection vulnerability in the wireless diagnostics page for Crestron AirMedia AM-100 devices with a firmware version 1.4.0.13. Commands execute as the account running the service i.e...
ROOT-APP-GOBINARY-CVE-2026-1229 CVE-2026-1229 in github.com/cloudflare/circl - Patched by Root
Root has patched CVE-2026-1229 in the github.com/cloudflare/circl package for Root:Go. Multiple fixed versions available...
CVE-2021-3560
Polkit Vulnerability - CVE-2021-3560 π Introduction In 2021, a researcher named Kevin BackHouse discovered a privilege escalation vulnerability in the polkit utility. however, not all linux versions are vulnerable to polkit. Below is an example of a vulnerable version; Red Hat Enterprise Linux 8...
vsftpd2.3.4PyExploit
vsftpd2.3.4PyExploit An exploit to get root in vsftpd 2.3.4 CVE-2011-2523 written in python Usage: ./exploit.py $VictimIPaddress Attention! The exploit open a shell that it is not reverse. I recommend to open a reverse shell after the exploit. I didnt do it here because i didnt want to assume wha...
CVE-2023-26866
CVE-2023-26866 Description GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete...
GhostLock-NVIDIA-Shield-9.2.4
GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 port of the GhostLock futex PI use-after-free CVE-2026-43499 for the 2019 NVIDIA Shield TV Pro mdarcy running Shield Experience 9.2.4. The payload changes the credentials of the live ADB daemon, so new ADB shells are UID 0 without a...
SUDO-privilege-escalation
SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...
CyberhawksLab-telnetCVE
CyberHawks lab demo finding report Credit to: @SafeBreach-Labs CVE: CVE-2026-24061 Lab: Cyberhawks Lab Target: 10.1.1.1 demo.cyberhawks.lab Finding ID: WU-08 Date: 2026-09-08 Severity: Critical Status: Confirmed / Exploited Executive Summary During an assessment of the Cyberhawks lab environment,...
android_autorooter
Android Autorooter This is just a mental note more than anything to further explore the posibilities of the work done here: https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html...
CVE-2019-14287-demo
CVE-2019-14287 Demo Container This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. This container can be run with: docker run -ti cashwilliams/cve-2019-14287-demo Configuration...
SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2
SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Description This project documents my penetration testing engagement as part of the CMIT 386 course at UMGC. It focuses on exploiting the Samba SMB usermapscript vulnerability CVE-2007-2447 on Metasploitable 2...
CVE-2026-PSA-2026-00043-1
PSA-2026-00043-1 CVE-2026-PSA-2026-00043-1 Proxmox VE 7.0β8.0.3: unauthenticated, single-request root auth bypass Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. β€οΈ α‘α % ααααΆαααα·α αα αΆαααααα’ααα...
Grandstream UCM6200 - SQL Injection
Grandstream UCM6200 series contains an unauthenticated remote SQL injection caused by crafted HTTP requests, letting attackers execute shell commands as root on versions before 1.0.19.20 or inject HTML in emails before 1.0.20.17. id: CVE-2020-5722 info: name: Grandstream UCM6200 - SQL Injection...
TerraMaster TOS <.1.29 - Remote Code Execution
TerraMaster TOS before 4.1.29 has invalid parameter checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with for example OS commands in the opt parameter. id:...
WAVLINK WN530H4 live_api.cgi - Command Injection
A remote command-line injection vulnerability in the /cgi-bin/liveapi.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication. id: CVE-2020-12124 info: name: WAVLINK WN530H4 liveapi.cgi - Command Injection author...
zyxel-p870hn-hardware-hacking
From a bare PCB to root: hardware-hacking a ZyXEL P-870HN over UART Two phone photos of an unlabeled router board β serial console β auth bypass β root shell β reproducing the real, still-unpatched chain CVE-2025-0890 hidden supervisor account + CVE-2024-40891 CLI command injection on hardware I...
CVE-2022-0847-DirtyPipe-Exploit
CVE-2022-0847-DirtyPipe-Exploit What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of...