ROOT-APP-PYPI-CVE-2026-48776 CVE-2026-48776 in langgraph-sdk - Patched by Root

Root has patched CVE-2026-48776 in the langgraph-sdk package for Root:PyPI. Multiple fixed versions available...

Exploit for Use After Free in Linux Linux_Kernel

Samsung Root Kit — Offline Version Android App DF Chain Prefe...

ROOT-OS-DEBIAN-13-CVE-2026-8927 CVE-2026-8927 in curl - Patched by Root

Root has patched CVE-2026-8927 in the curl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root

Root has patched CVE-2026-8924 in the curl package for Root:Debian:13. Multiple fixed versions available...

EUVD-2026-100981

The insights-runtime-extractor runs as a privileged DaemonSet hostPID: true that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. forks a child process 2. setns into the target container's PID and mount namespaces 3. fchdir back to an orphaned F...

ROOT-APP-NPM-CVE-2026-104852 CVE-2026-104852 in @graphql-tools/utils - Patched by Root

Root has patched CVE-2026-104852 in the @graphql-tools/utils package for Root:npm. Multiple fixed versions available...

CVE-2026-54161

CVE-2026-54161 PoC Summary upsmon interpolates the server-supplied, attacker-controllableups.alarm value, unsanitized, into a shell command that it runs via system. When a monitored device reports an ALARM state and the operator has configured NOTIFYCMD with EXEC on the ALARM event, an ups.alarm...

lenovo_y700_tb320fc_on_CVE-2025-21479

TB320FC Kernel Root — CVE-2025-21479 English | 简体中文 In-memory kernel privilege escalation for the Lenovo Legion Y700 2023 TB320FC , exploiting CVE-2025-21479 Qualcomm Adreno GPU SMMU vulnerability, with full root management provided by ReSukiSU. No bootloader unlock. No flashing. No PC required f...

meizu21-ghostlock-root

MEIZU 21 GhostLock Root Runtime root for the MEIZU 21 with a locked bootloader, based on GhostLock / CVE-2026-43499. This repository contains only the device-specific offsets, the prebuilt ARM64 payload, and scripts required to reproduce the setup. It does not contain Flyme OTA packages, boot.img...

ROOT-APP-NUGET-CVE-2026-50524 CVE-2026-50524 in Microsoft.NETCore.App.Runtime.linux-musl-arm64 - Patched by Root

Root has patched CVE-2026-50524 in the Microsoft.NETCore.App.Runtime.linux-musl-arm64 package for Root:NuGet. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-33891 CVE-2026-33891 in node-forge - Patched by Root

Root has patched CVE-2026-33891 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-33895 CVE-2026-33895 in node-forge - Patched by Root

Root has patched CVE-2026-33895 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-33894 CVE-2026-33894 in node-forge - Patched by Root

Root has patched CVE-2026-33894 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-25881 CVE-2022-25881 in http-cache-semantics - Patched by Root

Root has patched CVE-2022-25881 in the http-cache-semantics package for Root:npm. Multiple fixed versions available...

ghostlock-sabrina

GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...

ROOT-APP-NPM-CVE-2026-90711 CVE-2026-90711 in proxy-addr - Patched by Root

Root has patched CVE-2026-90711 in the proxy-addr package for Root:npm. Multiple fixed versions available...

CVE-2012-2982

CVE-2012-2982 This python script is written for vulnerability in Webmin 1.580, CVE-2012-2982. The vulnerability exists in the /file/show.cgi component and allows an authenticated user, with access to the File Manager Module, to execute arbitrary commands with root privileges. Installation Tested...

CVE-2017-7494_IT19115344

CVE-2017-7494IT19115344 A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root...

SiteGuard Server Edition vulnerable to OS command injection

Overview SiteGuard Server Edition provided by EG Secure Solutions Inc. is a host-based Web Application Firewall WAF designed to be integrated into a web server. The statistics feature of SiteGuard Server Edition contains the following vulnerability: OS command injection CWE-78 - CVE-2026-106931...

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine. Th...