Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-25081_2025-47273 — An exploit for vulnerable versions of fontforge and setuptools plus a practical example. | Kitploit
Tools/GitHubGitHub/inzegosec/cve-2024-25081_2025-47273
Privilege EscalationVulnerability AnalysisExploitationPenetration TestingCommand and Control
GitHubinzegosec/cve-2024-25081_2025-47273

CVE-2024-25081_2025-47273

An exploit for vulnerable versions of fontforge and setuptools plus a practical example.

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
107 months agoNot yet reviewed

CVE-2024-25081 and CVE-2025-47273 Proof of Concept

FontForge ≤ 20230101 version and Setuptools library < 78.1.1 version

CVE-2024-25081 CVE-2025-47273

Proof of concept for elevating privileges to the user running a task that uses Font Forge. The second CVE elevates privileges to root, provided you have write permissions to sensitive directories.

More info:

CVE IDVulnerabilityImpact
CVE-2024-25081Do not sanitize filenames before passing them to the shellCommand injection as the owner user
CVE-2025-47273Preliminary sanitization before decoding a URL - encoded URLPath Traversal and write file
Download Tool