CVE-2026-31431

Author: 0xShe Language / 语言 English: https://github.com/0xShe/CVE-2026-31431/blob/main/README.md 中文: https://github.com/0xShe/CVE-2026-31431/blob/main/README-CN.md CVE-2026-31431 Kernel Privilege Escalation Tool Guide 0x01 Quick Start Some target environments do not have Python installed, so this...

CVE-2026-20217

ZendTo 6.15-8 / ClamAV exact-profile RCE and root-variant reproduction This directory is a standalone, authorized-lab reproduction bundle for the no-account ZendTo-to-ClamAV code-execution chain and its separate default- profile Smarty/root-cron continuation. It includes: the complete runnable Po...

Zapscape-Fix

Zapscape-Fix — CVE-2026-64561 Kernel Live Patch KVM/x86 English |简体中文 A kernel live patch that fixes CVE-2026-64561 Zapscape on CentOS Stream 8 / RHEL 8 KVM hosts all 4.18.0- kernels. Without the patch : a tenant VM guest can escape to the host with guest-side actions alone and execute code with...

tiandy-research

tiandy-research This repository contains the results of my August 2020 research of Tiandy's IPC/NVR firmware these devices are also sold as OMNY. This "research" was not exhaustive, but I did find multiple methods to recover the administrator password remotely, enable telnet and change the root...

CVE-2026-58390

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view place a client commonname into data-common-name attributes without quote-safe encodin...

CVE-2026-57155

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

same_type_object_reuse_exploits

PoC Same-Type/Same-Address Object Reuse Exploits PoC exploits developed by Mathias Krause associated with the blog at https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse...

nagiosxi-root-rce-exploit

nagiosxi-root-exploit Overview A vulnerability exists in Nagios XI = 5.6.5 allowing an attacker to leverage an RCE to escalate privileges to root. The exploit requires access to the server as the 'nagios' user, or CCM access via the web interface with perissions to manage plugins. Details The...

CVE-2026-105474

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root...

Privilege-escalation-ASKEY

Privilege-escalation-ASKEY-Router-RTF3505VW-N1 CVE-2022-47040 Privilege escalation vulnerability on ASKEY routers Device: ASKEY RTF3505VW-N1 Firmware: BRSVg000R3505VMN1001s327 not tested in other version CLI Version: ReducedCLIHGUv13 Exploit: ASKEY RTF3505VW-N1 devices are provided with access...

Android-Projector-C2-Malware

Pre-installed C2 Infrastructure and RAT Payload on Android Projectors Technical Analysis Report — Security Research Affected Devices: Multiple Android projectors of projector brands like the Nonete e.g., Model HY260Pro likely also several projectors from Magcubic, Hotack, Huyukang and many more, ...

CVE-2025-20393

CVE-2025-20393 📌 Overview CVE-2025-20393 is a critical Remote Command Execution RCE vulnerability affecting Cisco Secure Email Gateway SEG and Cisco Secure Email and Web Manager SEWM appliances running Cisco AsyncOS. The vulnerability exists due to improper input validation in the Spam Quarantine...

CVE-2025-47917

CVE-2025-47917 Exploit Use-After-Free in mbedTLS Author : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 Vulnerability : Use-After-Free UAF in mbedTLS 3.6.4 name parsing Description This repository contains an exploit targeting a Use-After-Free vulnerability in the...

CVE-2025-32463-Chwoot-POC

CVE-2025-32463 Sudo EoP Exploit PoC Rust Using Prebuild Binary 1. Clone the repository and run the binary in the target machine. git clone https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC.git cd CVE-2025-32463-Chwoot-POC ./exploit Build From Source 1. Clone the repository if not done...

CVE-2019-9653

CVE-2019-9653 Date Disclosure: 03/11/2019 Last updated: 03/15/2019 Summary NUUO Inc. is a company providing a video-centric surveillance solution. They have many NVR Network Video Recorder products for different customers with various requirements. These NVRs are Linux embedded video recording...

sandboxec

sandboxec A lightweight command sandbox for Linux, built on Landlock. No daemon. No root. No image build step. Use it to run risky commands with a tighter blast radius: third-party CLIs, untrusted scripts, generated code, and one-off tooling. Purpose Running untrusted code is often an...

Exploit for Use After Free in Linux Linux_Kernel

Temporary Root via DirtyFrag on vivo Devices — The Root Cause...

CVE-2016-4669

CVE-2016-4669 Imperfect exploit code, for learning purposes only : 1 Compilation method Just run make 2 Function If successful, it can obtain root privileges. But the success rate is not high. 3 General overview Relatively stable creation of a dangling port. Cannot stably reuse the port with root...

CVE-2026-105474

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root...

CVE-2026-105474

A server-side template injection vulnerability exists in SolusVM 2 up to version 2.0.0-44576 . This flaw allows remote authenticated users to achieve arbitrary code execution with root privileges. The vulnerability is associated with CWE-1336 (Improper Neutralization of Special Elements Used in a...