ROOT-OS-DEBIAN-13-CVE-2026-23273 CVE-2026-23273 in linux - Patched by Root

Root has patched CVE-2026-23273 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-53292 CVE-2026-53292 in linux - Patched by Root

Root has patched CVE-2026-53292 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40142 CVE-2025-40142 in linux - Patched by Root

Root has patched CVE-2025-40142 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-39695 CVE-2025-39695 in linux - Patched by Root

Root has patched CVE-2025-39695 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23293 CVE-2026-23293 in linux - Patched by Root

Root has patched CVE-2026-23293 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31464 CVE-2026-31464 in linux - Patched by Root

Root has patched CVE-2026-31464 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-43115 CVE-2026-43115 in linux - Patched by Root

Root has patched CVE-2026-43115 in the linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2017-15944-POC

CVE-2017-15944-POC POC per CVE-2017-15944 esecuzione remota di codice root nei firewall Palo Alto Networks Utilizzo root@kitploit: python panos-poc.py https://panip...

sdwan-cve-2021-1480

Exploit per CVE-2021-1480 SD-WAN Materiali PoC per sfruttare la CVE-2021-1480 su Cico SD-WAN. La pubblicazione completa è disponibile sul sito XMCO: https://blog.xmco.fr/wp-content/uploads/2021/08/XMCO-SDWANReport-CVE-2021-1480.pdf Uso: 1. Aggiornare le righe 173 e 176 per impostare l'uid...

Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...

Cisco ISE - Remote Code Execution

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to...

YeaLink DM 3.6.0.20 - Remote Command Injection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. id: CVE-2021-27561 info: name: YeaLink DM 3.6.0.20 - Remote Command Injection author: shifacyclewala,hackergautam severity: critical description: Yealink...

CVE-2026-20217

ZendTo 6.15-8 / RCE ClamAV con profilo esatto e riproduzione della variante root Questa directory è un bundle autonomo di riproduzione per laboratorio autorizzato della catena di esecuzione di codice senza account da ZendTo a ClamAV e della sua continuazione separata Smarty/cron-root con profilo...

fwbt

fwbt Writeup: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Codice Proof of Concept per l'interazione con Firewalla tramite Bluetooth Low-Energy e lo sfruttamento di CVE-2024-40892 / CVE-2024-40893 Senza alcuna configurazione, eseguirà la scansione dei Firewalla nelle...

SharpCookieMonster

SharpCookieMonster root@kitploit: .&@. .@@. &&&@ @/ @ @ & ,& &@@@@/ &/ @ &@ @@@@@@@@ @. @. @@/ @ @@@@@@@/ @, @@ @ @@@@@@@@ && %%/%%&//... /% @@@@@@@@ @ ,@///////@. .@..@, %@@ &/////@@. .&@/////////////////&@. &%///@. &/////////////////////////%@...

CVE-2026-75364

Comfast CF-N1-S (firmware 2.6.0.1) and CF-WR630AX (2024-01-30 build) contain a command injection vulnerability in the update_interface_png SET handler within /usr/bin/webmgnt . The display_name parameter is not sanitized; user-controlled input is concatenated via sprintf() into the unquoted shell...

PT-2026-82051

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

PT-2026-82348

Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...

EUVD-2026-66744

Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX 2024-01-30 build, the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by...

Sudo-Chroot

Descrizione: Sudo prima della versione 1.9.17p1 consente agli utenti locali di ottenere accesso root perché /etc/nsswitch.conf da una directory controllata dall'utente viene utilizzato con l'opzione --chroot. Escalation dei Privilegi Locali tramite sudo-chroot -R...