CVE-2025-27591

Below - 本地权限提升 CVE-2025-27591 Below .log 符号链接到任何 root 拥有的文件，例如 /etc/passwd。 当使用 sudo 执行 below snapshot 时，它会强制将日志文件的模式设置为 0666 并写入其中——即使它是一个符号链接。 这允许注入一个无密码的 root 特权用户，从而导致获得完全的 root shell 访问权限。 使用方法 root@kitploit: git clone https://github.com/rvizx/CVE-2025-27591 cd CVE-2025-27591 chmod +x...

CVE-2026-1759

Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above...

CVE-2026-5118

Divi Form Builder ⚠️ 警告：此工具仅供授权渗透测试和安全研究使用。 未经授权访问计算机系统是违法的。仅可在您拥有或已获得明确书面许可的系统上使用。 更多免责声明：您可以在 Jenderal92 的封面上查看。请点击此处 !!! 概述 此 Python 2 脚本利用了 Divi WordPress 插件 （及相关 Divi 表单）中的权限提升漏洞。它可以通过以下方式远程注册一个管理员 账户： 从目标的 Divi 注册表单中提取 fbnonce。 向 /wp-admin/admin-ajax.php 发送带有 role=administrator 的精心构造的...

ghostlock-apk

GhostLock APK APK independiente: escalada de privilegios del kernel CVE-2026-43499 GhostLock + ejecución bajo la identidad de shell de Shizuku. Requisitos previos Honor AAK-AN00 / MagicOS 10 / Linux 6.6.89 / páginas de 4 KB Shizuku instalado e iniciado vía adb adb shell sh...

CVE-2026-1759

An improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows privilege escalation . The affected versions are 11.5 and 11.4.625515072 . The issue is fixed in version 11.6 or 11.4.626194074 and above. The CVSS 3.1 score is 6.5 (Medium) with a network a...

RootRemover

!WARNING 仅限在您拥有或已获授权测试的系统上使用。 RootRemover CVE-2026-31431 临时移除 root 密码，利用 CVE-2026-31431 在不获知当前用户密码的情况下，实现与架构无关的提权至 root。 请负责任地使用，仅在您获授权测试的系统上使用。此方法是否受您的系统支持会有所不同，但在我测试过的每个 Debian 衍生版上都有效。 本 PoC 的基础原理本质上是将 /etc/passwd 中您的 UID 替换为全 0，从而有效地赋予您 root 权限。而本方法改为移除 root 的密码，因此当您运行 su 时可立即获得...

CVE-2026-38766

CVE-2026-38766 Unistal Systems Pvt. Ltd. 的 Protegent 360 v2.0.0.4 中存在一个问题，允许本地攻击者通过内核模式驱动程序提升权限。...

CVE-2026-11387

CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ 未認証の権限昇格（任意のパスワードリセット経由） ☆ === Beelze === 📋 脆弱性情報 項目| 詳細 ---|--- CVE ID| CVE-2026-11387 CVSSスコア| 9.8 Critical CVSSベクトル| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H タイプ| 認証欠如 / OTPバイパス プラグイン| SMS Alert – WooCommerce向けOTP認証 sms-alert 影響を受けるバージョン| ≤ 3.9.5 修正バージョ...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

grafana: Grafana: Privilege escalation via dashboard overwrite

A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.33 packages and security update

Red Hat OpenShift Container Platform release 4.21.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

grafana: Grafana: Privilege escalation via dashboard overwrite

A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard...

CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit 部分写时复制 partial-COW 页缓存破坏 罪魁祸首提交 899ee91156e5，存在于 v5.18 .. 在 v7.1-rc7 中修复。packeteditmeme.c 将其转化为无特权的本地提权：一个拥有 userns CAPNETADMIN 的子进程覆盖了 setuid-root 二进制文件的已缓存 ELF 元数据，替换为 setgid0+setuid0+execve"/bin/sh" shellcode。 root@kitploit: make...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 ロールインジェクションによる認証なしの権限昇格 === Beelze zeroday 1diot9 === 📋 脆弱性情報 フィールド| 詳細 ---|--- CVE ID| CVE-2026-5118 CVSS スコア| 9.8 Critical CVSS ベクター| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-269 — Improper Privilege Management プラグイン| Divi Form Builder by...

2026-11551

2026-11551 CVE-2026-11551: Branda 插件 – 未认证权限提升（账户接管）...

CVE-2026-45048 OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps 模拟利用和缓解 CVE-2025-54918（Windows NTLM 漏洞）。包含检测脚本、Ansible 修补和 CI/CD 加固。演示从低权限访问到混合云环境中 SYSTEM 权限的提权过程。 作者：Mark Mallia 引言：从点击到控制——串联 CVE-2025-55226 和 CVE-2025-54918...