Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

209843 matches found

EUVD
EUVD•added 2026/09/15 12:33 p.m.•12 views

EUVD-2026-78470

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...

8.8CVSS5.8AI score0.00276EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment•added 2026/09/15 12:33 p.m.•11 views

CVE-2026-92007 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...

5.8AI score0.00276EPSS
SaveExploits0References7
EUVD
EUVD•added 2026/09/15 12:33 p.m.•10 views

EUVD-2026-78469

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...

8.8CVSS5.8AI score0.0035EPSS
SaveExploits0References7
Debian CVE
Debian CVE•added 2026/09/15 12:33 p.m.•9 views

CVE-2026-92006

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

8.8CVSS5.9AI score0.0035EPSS
SaveExploits0
Cvelist
Cvelist•added 2026/09/15 12:33 p.m.•34 views

CVE-2026-92006 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

0.0035EPSS
SaveExploits0References8
CVE
CVE•added 2026/09/15 12:33 p.m.•17 views

CVE-2026-92006

CVE-2026-92006 is a privilege escalation vulnerability caused by incorrect boundary conditions in the Graphics: CanvasWebGL component of Mozilla Firefox and Thunderbird. A remote attacker requiring user interaction can exploit the flaw to achieve high impact on confidentiality, integrity, and ava...

8.8CVSS5.8AI score0.0035EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment•added 2026/09/15 12:33 p.m.•10 views

CVE-2026-92006 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

5.8AI score0.0035EPSS
SaveExploits0References8
Kitploit
Kitploit•added 2026/09/15 12:23 p.m.•9 views

CVE-2026-41651

CVE-2026-41651 root@kitploit: CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 通过 PackageKit 的 D-Bus 事务处理器中的 TOCTOU 竞态条件实现本地提权。 任何无特权的本地用户都可以以 root 身份安装任意软件包——除了拥有本地会话外，无需任何身份验证。 仅限实验室 / 授权测试 （HTB、CTF、或具有书面授权的渗透测试）。 使用方法...

8.8CVSS7.9AI score0.0046EPSS
SaveExploits12References2
Kitploit
Kitploit•added 2026/09/15 12:13 p.m.•13 views

CVE-2026-47101-PoC

CVE-2026-47101 — LiteLLM Privilege Escalation via /key/generate + /user/update LiteLLM v1.82.6（v1.83.14 之前版本）的 /key/generate 端点允许低权限的 internaluser 请求带通配符路由 "/" 的 API key，随后通过 /user/update 端点将自身角色提升为 proxyadmin，实现未授权的权限提升。 Field| Value ---|--- CVE| CVE-2026-47101 CVSS v3.1| 8.8 HIGH —...

8.8CVSS7.9AI score0.01185EPSS
SaveExploits3References1
Kitploit
Kitploit•added 2026/09/15 12:13 p.m.•13 views

CVE-2026-43284

Dirty Frag — 内核页缓存写入跟踪站点 Dirty Frag 补丁状态跟踪器的源码：一个单页站点，记录各发行版是否已为 Linux 内核中成对的页缓存写入权限提升漏洞链推送修复。 事实数据所在位置 关于该漏洞的所有信息——CVE ID、受影响及已修复版本、上游修复提交、发现与披露致谢，以及最终各发行版补丁状态——均属于跟踪页面，而非本 README： 渲染页面： https://kimmo.cloud/CVE-2026-43284/ 源码： site/content/index.md 编辑该文件即可；本仓库中的其他内容均为构建基础设施。 此处有意不重复任何上述信息。本 READ...

8.8CVSS7.2AI score0.93235EPSS
SaveExploits32References3
Kitploit
Kitploit•added 2026/09/15 12:12 p.m.•8 views

CVE-2026-31635-DirtyDecrypt

CVE-2026-31635 · DirtyDecrypt Linux local privilege escalation in the RxRPC/GSSAPI decryption path. A missing skbcowdata check in rxgkdecryptskb allows an unprivileged local attacker to corrupt page cache pages and overwrite in-memory contents of read-only files. Contents Overview Quick Start...

7.5CVSS7.6AI score0.00923EPSS
SaveExploits4References2
Rockylinux
Rockylinux•added 2026/09/15 12:08 p.m.•8 views

rsync security, bug fix, and enhancement update

An update is available for rsync. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsync utility enables the users to copy and synchronize files locally or...

9.2CVSS7AI score0.00573EPSS
SaveExploits1
OSV
OSV•added 2026/09/15 12:08 p.m.•8 views

RLSA-2026:67463 Important: rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

8.2CVSS7AI score0.00573EPSS
SaveExploits1References23
Kitploit
Kitploit•added 2026/09/15 12:01 p.m.•7 views

packetfence-CVE-2024-39024

关于 安全研究员：ly1g3, ly1g3attuta.io GPG 指纹：https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 概述：远程代码执行 - 从低权限认证用户到管理员 RCE CVE：CVE-2024-3924 时间线： 发现 - ly1g3 报告 - ly1g3 修复 - packetfence 参考：https://www.packetfence.com/news/2024/packetfence-14-0-released/ Packetfence...

8.8CVSS6.1AI score0.00689EPSS
SaveExploits0
Kitploit
Kitploit•added 2026/09/15 11:53 a.m.•4 views

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Dirty Cowカーネルエクスプロイトを使用した特権昇格 このプロジェクトの目的は、Dirty COWエクスプロイト（CVE-2016-5195）の動作を実践的に示すことです。これはLinuxカーネルの重大な脆弱性です。パッチが適用されていないシステムに限定的なローカルアクセスを持つ攻撃者が、特権を昇格させて完全なrootアクセスを取得するリアルなシナリオをシミュレートします。...

7.2CVSS7.3AI score0.83524EPSS
SaveExploits92
Kitploit
Kitploit•added 2026/09/15 11:39 a.m.•5 views

CVE-2026-31431-Copy-Fail---Minified-LPE-PoC

CVE-2026-31431-CopyFail---Minified-LPE-PoC ⚠️ Descargo de responsabilidad Solo con fines educativos y de pruebas de seguridad autorizadas. Esta Prueba de Concepto PoC fue sintetizada para emulación de Red Team autorizada y auditoría de vulnerabilidades. Los autores y colaboradores no asumen ningun...

7.8CVSS6.6AI score0.99907EPSS
SaveExploits243
Kitploit
Kitploit•added 2026/09/15 11:33 a.m.•10 views

CVE-2019-2215

CVE-2019-2215 AndroidのBad Binder脆弱性に対するエクスプロイト。 @wired0ut 作成。 UAFを悪用して taskstruct をリークし、次に addrlimit を上書きし、cred 内の id ブロックを上書きすることで特権を昇格させます。 研究とエクスプロイトの全フローは こちら にあります（3部構成）。 これは goldfish Android カーネル arm64、バージョン4.14でテストされ、パッチが再導入されました。 実行例： root@kitploit: $ whoami whoami: unknown uid 1000 $ ./p...

7.8CVSS7.9AI score0.72105EPSS
SaveExploits31References1
Kitploit
Kitploit•added 2026/09/15 11:32 a.m.•8 views

cve-2025-32463

CVE-2025-32463-sudo-chwoot CVE-2025-32463 - Sudo chroot 权限提升漏洞的 PoC 原始 PoC sudo-chwoot.sh CTF 演示 chwoot-demo.c 文档 技术分析：https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot 安全公告：https://www.sudo.ws/security/advisories/chrootbug/ 其他 PoC ⚠️ 警告 ：这些 PoC 尚未经过验证。风险自负 Docker 化版本...

9.3CVSS7.7AI score0.61039EPSS
SaveExploits71References3
Kitploit
Kitploit•added 2026/09/15 11:25 a.m.•8 views

CVE-2025-27591

Below - 本地权限提升 CVE-2025-27591 Below .log 符号链接到任何 root 拥有的文件，例如 /etc/passwd。 当使用 sudo 执行 below snapshot 时，它会强制将日志文件的模式设置为 0666 并写入其中——即使它是一个符号链接。 这允许注入一个无密码的 root 特权用户，从而导致获得完全的 root shell 访问权限。 使用方法 root@kitploit: git clone https://github.com/rvizx/CVE-2025-27591 cd CVE-2025-27591 chmod +x...

6.8CVSS7.3AI score0.00364EPSS
SaveExploits23References1
NVD
NVD•added 2026/09/15 11:17 a.m.•6 views

CVE-2026-1759

Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above...

6.5CVSS0.00259EPSS
SaveExploits0References1
Rows per page
Query Builder