77837 matches found
vsftpd-234-backdoor
vsftpd 2.3.4 Backdoor Exploit A small, dependency-free Python 3 exploit for the vsftpd 2.3.4 backdoor CVE-2011-2523. It triggers the backdoor over FTP and drops you into an interactive root shell on the spawned listener. Written as a modern replacement for old exploit scripts which depended on...
CVE-2024-32019-ndsudo-local-privilege-escalation-NetData
CVE-2024-32019 Proof of Concept Python A Python implementation of the Local Privilege Escalation LPE exploit for Netdata CVE-2024-32019. This script exploits a vulnerability in the ndsudo component where the PATH environment variable is not properly sanitized. This allows a local attacker to...
Dirty-Frag-CVE-2026-43284
DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...
CVE-2026-24061_Lab
CVE-2026-24061 Telnetd Lab This repository contains a simple Docker lab to demonstrate the CVE-2026-24061 vulnerability. It allows authentication bypass and root access on GNU telnetd, on Linux. The purpose is exclusively educational. Requirements Docker installed Telnet Client installed Building...
Zero-Day-Legacy
🎓 Graduation Project — Ajloun National University ANU Faculty of IT · Cybersecurity and Cloud Computing · Academic Year 2026 🏆 Highest Grade in the University: 97% 📖 Overview Zero-Day Legacy is a realistic, intentionally vulnerable Boot-to-Root CTF Capture The Flag lab machine built as a graduati...
aapanel-ws-bypass
aaPanel: Vendors Don't Always Fix Things Properly An incomplete fix for CVE-2021-37840 still exposes 3.6M servers to root RCE, 5 years later Discovered by: EON Security CVE: Pending assignment CVSS: 8.8 High — AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: aaPanel versions 6.8.12 through 7.65.0...
ROOT-APP-PYPI-CVE-2026-82397 CVE-2026-82397 in tornado - Patched by Root
Root has patched CVE-2026-82397 in the tornado package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-35536 CVE-2026-35536 in tornado - Patched by Root
Root has patched CVE-2026-35536 in the tornado package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-49853 CVE-2026-49853 in tornado - Patched by Root
Root has patched CVE-2026-49853 in the tornado package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-49855 CVE-2026-49855 in tornado - Patched by Root
Root has patched CVE-2026-49855 in the tornado package for Root:PyPI. Multiple fixed versions available...
cisco-CVE-2023-20009
About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...
ROOT-OS-DEBIAN-12-CVE-2026-44169 CVE-2026-44169 in mariadb - Patched by Root
Root has patched CVE-2026-44169 in the mariadb package for Root:Debian:12. Multiple fixed versions available...
pentesting-obioba
pentesting-obioba Black box pentesting: Shellshock CVE-2014-6271 + Log4Shell CVE-2021-44228. Root escalation. Executive and technical report Pentesting Obioba — Security Audit Black Box Project of the 360° Cybersecurity Bootcamp by The Bridge Digital Talent Accelerator 2025-2026. 🎯 Objective...
Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow
Privilege-Escalation-using-the-Dirty-Cow-Kernel-Exploit This project aims to practically demonstrate the operation of the Dirty COW exploit CVE-2016-5195, a critical vulnerability in the Linux kernel. It simulates a realistic scenario in which an attacker with limited local access to an unpatched...
Code-27-Companion-Hub-Exploits
Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...
CVE-2026-41651
CVE-2026-41651 CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 Local privilege escalation via TOCTOU race condition in PackageKit's D-Bus transaction handler. Any unprivileged local user can install arbitrary packages as root ...
ROOT-APP-GOBINARY-CVE-2026-46597 CVE-2026-46597 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2026-46597 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-39829 CVE-2026-39829 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2026-39829 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...