CVE-2026-106931

SiteGuard Server Edition versions 2.20 through 8.00 Update4 contain an OS command injection vulnerability within the statistics feature, which is enabled by default. A local attacker with low-privileged account access can exploit this flaw to execute arbitrary commands with root or SYSTEM privile...

CVE-2026-106931

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

EUVD-2026-100814

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

CVE-2026-110452

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

EUVD-2026-100808

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

Simulation_CVE-2024-46256

CVE-2024-46256 & CVE-2024-46257 – PoC Simulation Overview This repository contains a step-by-step, image-backed Proof of Concept PoC simulating two vulnerabilities in Nginx Proxy Manager that enable OS Command Injection, leading to Remote Code Execution RCE after authentication. Affected product:...

CVE-2021-4034

Study Project CVE-2021-4034 PwnKit This repository contains the materials, code examples, and documentation for the study project within the elective module Applied IT Security about the security vulnerability CVE-2021-4034 , also known as PwnKit. Summary This study project within the elective...

Audit-BlackBox-Web-to-Root

Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...

avdroot

avdroot Root an Android Studio emulator by patching its ramdisk with Magisk — in pure Go. English · 简体中文 avdroot takes an AVD from a cold start to a working root shell with one command. Everything happens on the host: the ramdisk is decompressed, rewritten so Magisk's init replaces /init, and re...

CVE-2020-5902

🚨 CVE-2020-5902 — F5 BIG-IP TMUI RCE CVE-2020-5902 is a critical unauthenticated Remote Code Execution RCE vulnerability in the F5 BIG-IP Traffic Management User Interface TMUI / Configuration utility. 📌 Overview Disclosed by F5 on June 30, 2020 NVD published July 1, 2020, this flaw allowed...

CLEANSTART-2026-OI68179 BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli

Security vulnerability affects the openjdk11 package. The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli...

CLEANSTART-2026-PU34028 On Windows, when the target of Root

CVE-2026-56857 affects multiple packages. On Windows, when the target of Root. See references for individual vulnerability details...

cve-2026-43499-aak-an00

CVE-2026-43499 · 荣耀 WIN RT AAK-AN00 临时 Root 研究笔记 （全是deepseek写的，我啥也不懂） （又折腾了几天，进展为零，放弃了） （目前可以获取root，但非常不稳定，root后会断网，拔线会重启） （此仓库所有结论都只适用于荣耀 WIN RT，CVE-2026-43499漏洞，6.6.118-android15-8-gf17133276a57-abogki518694926-4k内核，不要扩散结论到临时root上，临时root可以持续并相对稳定运行） 设备 Bootloader 永久锁死 （ro.oemunlock.supported...

IonStack_S21

IonStackS21 — CVE-2026-43499 research for Galaxy S21 SM-G991B Working, active KernelSU project for this device: kurtulusakyuz/dfroot-s21 — start there. This repo keeps the IonStack research only. Device-specific IonStack payload for the Samsung Galaxy S21 o1s on firmware G991BXXSJHZC2. Status:...

PT-2026-113648

The Akamai Guardicore Platform Agent GPA before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting ...

CVE-2026-46449

The Akamai Guardicore Platform Agent GPA before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting ...

PT-2026-114073

Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core public keys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to...

CVE-2026-110631: Initialization of a Resource with an Insecure Default

Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty corepublickeys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to...

PT-2026-113807

Name of the Vulnerable Software and Affected Versions Junos OS affected versions not specified Junos OS Evolved affected versions not specified Description An improper authentication issue exists in the J-Web management interface and NETCONF session handling. This flaw allows an unauthenticated...

CVE-2026-106931: Improper Neutralization of Special Elements used in an OS Command

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...