208348 matches found
sudo-chroot
描述： Sudo 1.9.17p1 之前的版本允许本地用户通过 --chroot 选项使用来自用户控制目录的 /etc/nsswitch.conf 来获取 root 访问权限。 Sudo 本地权限提升 --chroot...
CVE-2022-3294
Referencia de Exploit: https://github.com/kubernetes/kubernetes/issues/113757 https://github.com/kubernetes/kubernetes/issues/119640 https://github.com/kubernetes/sig-security/blob/main/sig-security-external-audit/security-audit-2021-2022/findings/Kubernetes%20v1.24%20Final%20Report.pdf...
CVE-2026-0307
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-46300
安全研究与法律免责声明 本仓库仅用于教育和授权的安全研究目的。 允许的使用 在受控环境（本地虚拟机、隔离实验室）中理解安全漏洞及其利用概念 研究沙箱隔离机制及其局限性 学习安全的软件设计与防御性安全实践 获得系统所有者明确书面授权的渗透测试 禁止的使用 攻击、利用或未经授权访问任何系统、网络或数据 开发或分发恶意软件、勒索软件或恶意工具 任何非法或不道德的安全活动 法律声明 您有责任遵守所有适用法律 未经明确授权，不得在生产系统或公共互联网上使用本内容 作者不对因使用本内容而导致的任何滥用或损害承担责任 使用本仓库即表示您同意：...
CVE-2026-0304
CVE-2026-0304 has been reserved by an organization or individual for a future security announcement. No concrete technical details, affected products, or impact are publicly available in the provided documents. Monitor for updates when the candidate is publicized.
EUVD-2026-75268
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...
CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...
osbuild-composer security update
An update is available for osbuild-composer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...
EUVD-2026-75266
The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...
CVE-2026-81431 Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id
The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...
CVE-2026-81431 Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id
The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...
CVE-2026-81431
The Registration Form for WooCommerce WordPress plugin versions 1.1.0 through 1.1.2 fails to validate the tgwcfb_id parameter during registration, reading the permitted-role allow-list from an arbitrary attacker-controlled post rather than a legitimate registration form. A user with Contributor o...
EUVD-2026-75257
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0307
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect app allow a non-administrative local user to escalate to NT AUTHORITY\SYSTEM on Windows or root on macOS and Linux, enabling arbitrary command execution with administrative privileges. The GlobalProtect ap...
EUVD-2026-75255
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
CVE-2025-32463_exploit
CVE-2025-32463 — sudo "chwoot" chroot: escalada local de privilegios Escalada local de privilegios a root en sudo mediante la opción --chroot -R. Funciona para cualquier usuario local , incluidas cuentas sin ninguna entrada en sudoers p. ej. www-data. sudo 1.9.14 – 1.9.17 hace chroot al directori...
CVE-2025-3500-Poc
Lab: CVE-2025-3500 - Avast Antivirus 整数溢出权限提升漏洞 下载 下载实验 ZIP：https://github.com/chicken3962/CVE-2025-3500-Poc/releases/download/Release/cve-2025-3500.zip 🚀 概述 本仓库提供了一个用于研究 CVE-2025-3500 的实验环境，该漏洞是 Windows 平台上 Avast Antivirus 25.1.981.6...
hack
💀 PwnKit CVE-2021-4034 与反向 Shell 工具包 ⚠️ 免责声明： 本仓库仅用于教育和安全研究目的。作者不对这些工具的滥用负责。请仅在受控环境或获得明确授权的系统中使用。 📜 描述 本仓库包含针对 PwnKit （CVE-2021-4034）漏洞编译的概念验证（PoC），这是 Polkit 组件 pkexec 中一个严重的本地权限提升漏洞。 此外，还附带一个 PHP 反向 Shell 脚本，可在漏洞利用后部署，或作为初始访问向量。 🎯 目标 在易受攻击的 Linux 系统上获取 root 权限，并通过反向 Shell 建立持久化或远程控制。 📂 工具包内容 1...
CVE-2024-32019-ndsudo
ndsudo 漏洞允许攻击者通过利用 Netdata Agent 中 ndsudo 工具的不受信任搜索路径来获取 root 权限。如果攻击者将恶意二进制文件放入可写目录，并相应修改 PATH 环境变量，则可借此以提升的权限执行任意程序。 该 ndsudo 漏洞编号为 CVE-2024-32019，影响 Netdata Agent 随附的 ndsudo 工具版本，具体为 v1.45.0 及以下版本。此漏洞允许攻击者在安装了该工具的系统上进行权限提升。 漏洞工作原理： 漏洞利用机制：- 不受信任的搜索路径：ndsudo 工具使用 PATH 环境变量来定位外部命令。...