
CVE-2019-11707-from-an-IonMonkey-type-confusion-to-SYSTEM-
Windows proof-of-concept exploit chain for CVE-2019-11707, a Firefox IonMonkey type confusion, combining browser RCE with sandbox escape to achieve…

Windows proof-of-concept exploit chain for CVE-2019-11707, a Firefox IonMonkey type confusion, combining browser RCE with sandbox escape to achieve…

Validated GhostLock CVE-2026-43499 port for NVIDIA Shield TV Pro mdarcy 9.2.4

analysis of the sudo buffer overflow affect sudo version <1.8.26 and how to use GCC to compile publicly availible exploits

Proof-of-concept LPE exploit for Android Binder UAF that uses iovec spraying and addr_limit overwrite to achieve arbitrary kernel read/write.

Proof-of-concept exploit for CVE-2021-0516 in wpa_supplicant on AOSP 10, demonstrating a buffer overflow vulnerability in Wi-Fi authentication.

A PoC application demonstrating the power of an Android kernel arbitrary R/W.

#INFILTRATE19 raptor's party pack.

Android kernel exploit for CVE-2019-2215, a use-after-free in the Binder driver, enabling privilege escalation to root via memory corruption and cred…

Proof-of-concept exploit for CVE-2019-2215 targeting Android kernel to achieve root privilege escalation on AQUOS sense 2 (SH-M08). Includes kernel…

Demonstration exploit for CVE-2019-18276, a local privilege escalation vulnerability in Bash, using a crafted shared library to gain root access.

Local privilege escalation exploit for CVE-2019-0211 targeting Apache HTTP Server 2.4.17-2.4.38 with mod_php. Uses UAF in PHP to corrupt Apache…

This repo contains both the exploit and the explaination of how this vulnerability is exploited

C-based local privilege escalation exploit targeting Linux kernel ptrace_link credential mishandling (CVE-2019-13272) for root access on kernels 4.10…


Security Research

Using CVE-2019-0708 to Locally Promote Privileges in Windows 10 System

AppXSvc Arbitrary File Security Descriptor Overwrite EoP

CVE-2019-0708 - BlueKeep (RDP)