Privilege Escalation

VMs Won't Contain Cyber-Capable Agents Byte

CVE-2026-64561 - Zapscape, a KVM/x86 guest-to-host escape Vulnerability

CVE-2026-50656 - ShieldBreak PoC claims a Defender RoguePlanet patch bypass Vulnerability

CVE-2026-31431 - Copy Fail: Four Bytes to Root Vulnerability

CVE-2026-31431 - Copy Fail: Linux kernel page-cache write to root Vulnerability

CVE-2026-43284 - "Dirty Frag" Linux page-cache LPE via ESP and RxRPC Vulnerability

CVE-2026-46300 - Fragnesia: Linux kernel page-cache overwrite to root Vulnerability

Deep dive into CVE-2025-29824 in Windows Byte

CVE-2023-24871: intro & vulnerability description Byte

Cellebrite zero-day exploit used to target phone of Serbian student activist Byte

CVE-2023-4911 - Looney Tunables: glibc ld.so overflow to root Vulnerability

CVE-2023-0386 - Privilege escalation exploit in OverlayFS Vulnerability

CVE-2023-22809 - sudoedit policy bypass allows editing any file Vulnerability

CVE-2022-22715 - Windows Dirty Pipe: a ushort overflow in npfs.sys escapes the Adobe Reader sandbox Vulnerability

CVE-2022-32893 - Apple fixes two exploited 0days in WebKit and kernel Vulnerability

Microsoft links Austrian firm DSIRF to Subzero spyware attacks Byte

CVE-2022-34918: A crack in the Linux firewall Byte

CVE-2022-34893 - Trend Micro Maximum Security LPE Vulnerability

CVE-2022-32250 - Local privilege escalation via use-after-free in netfilter Vulnerability

Vulnhub - Breach 2.1 boot2root CTF walkthrough 8 min read

Breach 2.1 is meant to be beginner to intermediate boot2root/CTF challenge. The VM is configured with a static IP address (192.168.110.151) so you will need to configure your host-only adaptor to this …

Vulnhub - Breach 1 boot2root CTF walkthrough 10 min read

Breach 1.0 is meant to be beginner to intermediate boot2root/CTF challenge. The VM is configured with a static IP address (192.168.110.140) so you will need to configure your host-only adaptor to this …