HVCIPwned

CVE-2024-35250 Local privilege escalation via untrusted pointer dereference in Windows Kernel Streaming driver ks.sys. Data-only exploit — bypasses Hypervisor-protected Code Integrity HVCI. Summary Field| Detail ---|--- CVE| CVE-2024-35250 Component| ks.sys Kernel Streaming Bug Class| Untrusted...

CVE-2025-6018-6019-PoC

CVE-2025-6018 & CVE-2025-6019: Local Privilege Escalation PoC A robust Proof of Concept PoC for chaining CVE-2025-6018 PAM/Polkit Active Session Bypass and CVE-2025-6019 libblockdev SUID Mount Flaw to achieve root access on vulnerable Linux systems. Disclaimer This tool is for educational purpose...

CVE-2021-29337

CVE-2021-29337 - Privilege Escalation in MODAPI.sys MSI Dragon Center General Affected Product: MSI Dragon Center Affected Version: 2.0.104.0 CVE MITRE Description A vulnerable kernel driver MODAPI.sys in dragon center exposes IOCTL 0x9C406104 which allows low-privileged users to interact directl...

CVE-2024-3094-checker

CVE-2024-3094 Detection and Remediation Script This script is designed to detect and remediate a critical vulnerability, CVE-2024-3094, which affects the XZ Utils data compression library. The vulnerability was highlighted in a CISA Alert and has significant implications for system security. This...

confusploit

This is a Script to find vulnerable servers to CVE-2022-26134 and can be used together SHODAN CLI and Bash Scripting One-Liner Please use only for legal and educational purposes Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a...

CVE-2025-32044

CVE-2025-32044 — Moodle Unauthenticated REST API User Data Exposure Stack Trace Args Leak → Names, Emails, Password Hashes Overview CVE-2025-32044 is a high-severity CVSS 7.5 unauthenticated information disclosure vulnerability in Moodle LMS 4.5.0 through 4.5.2. The vulnerability lies in Moodle's...

CVE-2024-46986

CVE-2024-46986 Camaleon CMS Exploit - Arbitrary File Upload This repository contains a Python script that automates the exploitation of a file upload vulnerability in Camaleon CMS. The vulnerability allows an attacker to upload arbitrary files such as Ruby scripts to the server, potentially leadi...

pbck-exploit

Mass Exploitation & Validation Framework for Joomla Page Builder CK Unauthenticated Arbitrary File Upload → Remote Code Execution 📑 Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigatio...

log4shell-poc-lab

Log4Shell POC Demo This repository contains a submodule, clone it with: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git Then to start the demo execute: docker compose up To view the exploit creating a file on the victim server, execute: docker compose exe...

CVE-2023-4966-POC

CVE-2023-4966-POC Proof Of Concept for NetScaler CVE-2023-4966 Vulnerability Description This Python script exploits CVE-2023-4966, a critical vulnerability in Citrix ADC instances that allows unauthenticated attackers to leak session tokens. The vulnerability is assigned a CVSS score of 9.4 and ...

CVE-2026-3295 IBM Cloud Pak System Cross-Site Scripting

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering specially crafted payloads containing...

CVE-2026-3295

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 are vulnerable to Stored Cross-Site Scripting (Stored XSS) . The root cause is that the web application fails to properly sanitize or HTML-encode user-supplied input before storing and rendering it. An authenticated attacker can exploit this by pr...

EUVD-2026-104521

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering specially crafted payloads containing...

CVE-2026-98528

A flaw was found in the Linux kernel's GPIO General Purpose Input/Output character device interface. This vulnerability allows a local user to cause an information disclosure of sensitive kernel stack data. When an error occurs while querying GPIO line details, the kernel fails to clear the data...

CVE-2026-98529

A flaw was found in the Linux kernel's Arizona General Purpose Input/Output GPIO driver. This issue allows a local user to cause a resource leak by triggering an error during persistent GPIO line configuration. Specifically, if an internal register update fails while changing pin direction from...

CVE-2026-98527

A flaw was found in the Linux kernel's Zynq General Purpose Input/Output GPIO driver. A local user could cause a Denial of Service DoS when requesting a GPIO line fails due to improper reference count handling in the runtime power management subsystem. The error path fails to decrement the usage...

CVE-2026-106589

A flaw was found in OpenSSH. This vulnerability may allow privilege escalation on operating systems that lack support for file-descriptor passing and unprivileged terminal device allocation. In these environments, the session process unexpectedly retains administrative root privileges after user...

CVE-2026-98516

A flaw was found in the Linux kernel's Nouveau graphics driver. The driver fails to properly release a reference to a PCI Peripheral Component Interconnect bridge device after querying its configuration space during initialization. A local user could exploit this flaw during device setup or bindi...

CVE-2026-98451

A flaw was found in the Linux kernel's SMB client. A local user can trigger this issue by opening an existing symbolic link or non-regular file on an SMB mount using file creation flags. Because the client improperly handles non-regular files during open operations, it fails to release directory...

CVE-2026-98519

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. A local user with access to the debugfs interface can trigger an interrupted lock operation during device testing, which prevents the driver from releasing an acquired runtime power management reference. Consequently, the graphics...