skip to content
~/bokkapig
_
machines
refs
tags
search
hack the box machine writeups
← cd ../tags
grep -l "Local Privilege Escalation" ./machines
(3)
Reactor
[Linux]
Easy
2026-08-04
Next.js
React Server Components
CVE-2025-55182
CVE-2025-66478
React2Shell
Insecure Deserialization
+7
▲ pwned // not yet retired
Cohort
[Linux]
Easy
2026-08-01
marimo
CVE-2026-39987
Pre-Auth RCE
WebSocket
SSRF
PackageKit
+4
▲ pwned // not yet retired
Silentium
[Linux]
Easy
2026-04-11
Flowise
CVE-2025-58434
Password Reset Token Disclosure
Account Takeover
CVE-2025-59528
Custom MCP
+10
▲ pwned // not yet retired
