CVE-2019-19268

CVE-2019-19268 Затронутая версия: rConfig 3.9.2. Описание Множество векторов атак в rConfig v3.9.2 из-за неправильной конфигурации, что позволяет локальным пользователям выполнять команды root через sudo. Обнаружившие dmw0ng - Discord: dmw0ng4449 TheCyberGeek - Discord: TheCyberGeek1892 Email:...

SimpleCTF-THM-Walkthrough

SimpleCTF-THM-Relatory Первый успешно пройденный CTF! В этом репозитории документируется мое прохождение комнаты Simple CTF на TryHackMe. Он охватывает сетевую разведку Nmap, веб-эксплуатацию CVE-2019-9053 и взлом учетных данных. Как разработчик, было здорово перейти от SQLi к оболочке Root,...

htb-facts

HTB — Facts Easy/Linux - Stagione 10 Riepilogo Facts è una macchina Linux di livello facile che richiede lo sfruttamento di una vulnerabilità nota CVE-2025-2304 in Camaleon CMS per estrarre le credenziali locali di AWS S3. L'enumerazione dei bucket S3 interni rivela una chiave privata SSH che dev...

CVE-2018-1049-POC

Questo script Python è una reimplementazione personalizzata del modulo exploit di Metasploit per CVE-2018-1049, che prende di mira VyOS Vyatta tramite una vulnerabilità di escalation dei privilegi in uno script Perl utilizzato in modo improprio tramite sudo. Sono necessarie credenziali SSH valide...

CVE-2023-1326

CVE-2023-1326 إثبات مفهوم لـ CVE-2023–1326 في apport-cli 2.26.0 هذه الثغرة هي تصعيد صلاحيات في apport-cli 2.26.0، وهي مشابهة لـ CVE-2023–26604، وتعمل هذه الثغرة فقط إذا تم تعيينها في sudoers: تم العثور على هجوم تصعيد صلاحيات في apport-cli 2.26.0 والإصدارات السابقة وهو مشابه لـ CVE-2023-26604. إذا...

CVE-2023-1326-PoC

CVE-2023-1326-PoC Una prova di concetto per CVE-2023–1326 in apport-cli 2.26.0 Questa vulnerabilità è un'escalation dei privilegi in apport-cli 2.26.0, simile a CVE-2023–26604, questa vulnerabilità funziona solo se assegnata in sudoers: Un attacco di escalation dei privilegi è stato riscontrato i...

SUDO_KILLER

⭐ Dê uma estrela no GitHub — para mostrar seu apoio! 💡 Melhor visualizado no Modo Escuro : O projeto SUDOKILLER chegou à final do SANS Difference Award 2023 na categoria ferramenta de código aberto. Contribuindo Estrelas ao longo do tempo Suporte Créditos Aviso Legal Licença Introdução SUDOKILLER...

CVE-2023-1326

CVE-2023-1326 Una proof of concept per CVE-2023–1326 in apport-cli 2.26.0 Questa vulnerabilità è un escalation di privilegi in apport-cli 2.26.0, simile a CVE-2023–26604; questa vulnerabilità funziona solo se assegnata in sudoers: È stato trovato un attacco di escalation di privilegi in apport-cl...

CVE-2024-37081

CVE-2024-37081: Multipla Escalation dei Privilegi Locali in VMware vCenter Server Il vCenter Server contiene molteplici vulnerabilità di escalation locale dei privilegi dovute a una errata configurazione di sudo. Un utente locale autenticato con privilegi non amministrativi potrebbe sfruttare...

CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 e CVE-2025-34323 Nagios Log Server Exploits de Prova de Conceito para CVE-2025-34322 e CVE-2025-34323 no Nagios Log Server, juntamente com um script combinado para obter um shell como root. CVE-2025-34322 Após a autenticação, substitua seu ID de sessão nestes dois comandos curl. O...

Room-Walkthrough-Billing

🧠 Walkthrough della Stanza: Billing Scritto da: Aditya Bhatt | Contributore Open Source 📦 Panoramica In questo walkthrough, ci immergiamo completamente nella Stanza Billing , mostrando un'istanza vulnerabile di MagnusBilling, un succulento RCE non autenticato CVE-2023-30258, e una misconfigurazio...

Shocker-TJNULL-OSCP-

HackTheBox: Shocker Writeup Eine strukturierte und professionelle Anleitung, die die Identifizierung und manuelle Ausnutzung der kritischen Shellshock -Sicherheitslücke zeigt, gefolgt von lokaler Privilegienerweiterung über falsch konfigurierte sudo-Rechte auf einem Linux-Zielsystem. Technische...

Exploit for OS Command Injection in Gnu Bash

HackTheBox: Shocker Writeup A structured and professional walk...

From-Shell-to-Root

🔥 Red Team Notes Pentesting This repository contains real-w...

📄 Raynet rvia 12.6.4392.49-amd64.deb Privilege Escalation

Proof of concept privilege escalation exploit for Raynet's RayVentory Inventory Agent version 12.6.4392.49-amd64.deb. ============================================================================================================================================= | Title : Raynet rvia...

CVE-2021-47799

Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access. Attackers can exploit the unsafe Sudo settings by using mount commands to bind a shell, enabling unauthorized system-level privileges...

EUVD-2026-2754

Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access. Attackers can exploit the unsafe Sudo settings by using mount commands to bind a shell, enabling unauthorized system-level privileges...

CVE-2021-47799

Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access. Attackers can exploit the unsafe Sudo settings by using mount commands to bind a shell, enabling unauthorized system-level privileges...

Exploit for Deserialization of Untrusted Data in Apache Activemq

Broker Machine Pentesting Report Target & Overview - Mac...

CVE-2025-34323

Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories. The 'www-data' user is a member of the 'nagios' group, which has write access to...