CVE-2022-26965

This exploit targets CVE-2022-26965 in Pluck CMS 4.7.16, leveraging authenticated theme upload functionality to achieve remote code execution. It authenticates as an admin, uploads a malicious theme archive (shell.tar), and deploys a webshell.

This repository contains a working privilege escalation exploit for CVE-2022-26965, leveraging the DirtyCow vulnerability to overwrite a SUID binary with a shellcode payload. The exploit is designed to gain root access on vulnerable Linux systems.