root-dirtyc0w

root-dirtyc0w CVE-2016-5195 DirtyCow 根权限提升 Dirty COW 是 Linux 内核中的一个竞态条件漏洞。该漏洞存在于处理内存映射写时复制（COW）特性的内核函数中，被利用时可允许进程写入只读文件。 该漏洞的一个示例用例是，将任何 SUID（设置用户 ID）二进制文件（如 passwd 可执行文件）覆盖为一个不同的 ELF 可执行文件（我们创建的），该文件执行 /bin/sh 从而获取 root 权限（如本仓库所示）。 你可以在 Linux 中找到更多设置了 SUID...

ghostlock-s26

GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499 ported to the Samsung Galaxy S26 series — Android 16 / GKI 6.12. One binary, three kernel lines, dynamic parameter matching at runtime: theoretically covers the whole S26 series without per-build compilation. Most GhostLock porting effort...

CVE-2023-36407

CVE-2023-36407 Este es un PoC para CVE-2023-36407, la Vulnerabilidad de Elevación de Privilegios en Hyper-V. https://github.com/pwndorei/CVE-2023-36407/assets/96749184/a8ef87d3-e0d0-40e5-9b23-35ab057a9c78 Vulnerabilidad Lectura/Escritura OOB desde/hacia el Non-paged Pool mediante...

HP-HPLIP-Mass-CVE-checker-2026-09-

massexploit — Comprobador masivo de CVE de HP HPLIP 2026-09 Driver de comprobación masiva e investigación de explotación para HP HPLIP 3.26.6 — CVE-2026-91097 hasta CVE-2026-91106. CVE| CVSS 4| CWE| Remoto ---|---|---|--- CVE-2026-91097| 7.0| CWE-787| sí UI CVE-2026-91098| 8.6| CWE-122| sí UI...

propane

propane Exploits the arbitrary file write bug in ProFTPD's modcopy module CVE-2015-3306 and attempts code execution...

CVE-2026-40987

CVE-2026-40987: Spring Integration Remote File Synchronization Path Traversal PoC This repository is a minimal reproduction PoC for CVE-2026-40987, as disclosed in the official Spring Security Advisory. Official advisory: https://spring.io/security/cve-2026-40987/ Official title: Remote-file...

cve-2019-6260

A Test and Debug Tool for ASPEED BMC AHB Interfaces Warning DO NOT USE THIS TOOL IF YOU HAVE NOT UNDERSTOOD ITS BEHAVIOURS IN THE CONTEXT OF YOUR TARGET MACHINE. This tool pokes at low-level hardware and firmware interfaces of your machine. Particularly, the act of probing implies uncertainty abo...

phpipam_1.4.4

CVE-2022-23046 phpIPAM 1.4.4 - SQL Injection phpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the subnet parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php. This project currently prints out database information and host version...

CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, with vulnerability ID CVE-2017-16995...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "If exploited, the link following vulnerability could allow remote attackers who have gained user access to traverse the fi...

cve-2016-7190

Overview CVE-2016-7190 0 is a heap overflow in the Array.map function of ChakraCore that allows to overwrite adjacent memory. The main idea to gain arbitrary read-write access is to first allocate a number of consecutive JavaScript integer Arrays. and to exploit the overflow to manipulate the siz...

CVE-2021-21425

CVE-2021-21425 GravCMS 未授权任意YAML写入/更新导致代码执行 CVE-2021-21425 参考 : https://pentest.blog/unexpected-journey-7-gravcms-unauthenticated-arbitrary-yaml-write-update-leads-to-code-execution/...

CVE-2023-42819

CVE-2023-42819 CVE-2023-42819 Vulnerability Description JumpServer Arbitrary File Write Vulnerability CVE-2023-42819 + CVE-2023-42820 = GetShell USAGE 1. Place the script and required files in the same directory 2. Ensure Google Chrome is installed, and obtain its version number reg query...

CVE-2026-33032

CVE-2026-33032 Comprobación segura lee el estado de nginx python3 main.py http://target:9000 --tool nginxstatus Listar configuraciones python3 main.py 10.0.0.50 --tool nginxconfiglist Demo destructiva escribe + recarga python3 main.py http://target:9000 \ --tool nginxconfigadd \ --payload poc.con...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC Este repositorio contiene un exploit de prueba de concepto PoC de ejecución remota de código RCE dirigido a la PlayStation 4 con firmware 6.20, aprovechando CVE-2018-4441. El exploit primero establece una primitiva de lectura/escritura arbitraria, así como una...

BlueGate

BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...

CVE-2022-22706-poc

CVE-2022-22706 - Escritura de Page-Cache El controlador de GPU Arm Mali entrega al espacio de usuario un mapeo escribible por CPU de páginas que fijó como solo lectura, por lo que un proceso sin privilegios obtiene un alias escribible de la caché de páginas que respalda un archivo que solo puede...

CVE-2026-36848

CVE-2026-36848 A critical path traversal vulnerability was identified in the web-based management engine on port 8089 of Gigamon-VUE OS GVOS appliances. This flaw exists in the legacy H-VUE subsystem within the persistd daemon and allows an unauthenticated, remote attacker with network access to...

CVE-2024-2887

CVE-2024-2887 这是关于 CVE-2024-2887 的简短撰写说明，我利用此漏洞获得了 V8CTF M123 的奖励。 当定义的类型数超过 kV8MaxWasmTypes（可通过在 RecGroup 中填充更多类型来实现）时，类型索引可能超过 20 位并发生溢出。这样，两个具有相同 heaptype 的类型可能被视为相同。 我们可以通过创建一个包含 ref 对象的数组并使用 float64 数组读取来获得 addrof 原语，以及通过创建 float64 数组并将其作为对象读取来获得 fakeobj 原语。 wasm 模块的构建器如下所示： const builder =...

CVE-2026-46331

🚨 CVE-2026-46331 - Linux Kernel COW Bug Linux Kernel net/sched Partial Copy-on-Write COW Page Cache Corruption -orange?style=for-the-badge A Linux kernel vulnerability caused by incorrect Copy-on-Write COW handling in the traffic control tc packet editing subsystem. 📖 Overview CVE-2026-46331 is a...