-Linux-PrivEsc-CVE-2024-48990

Privesc-need-restart-2024-48990 Exploit Explanation CVE-2024-48990 - Pure Python This script exploits the CVE-2024-48990 vulnerability in the needrestart Linux utility through library path hijacking PYTHONPATH hijacking. Unlike the original vector, this method uses exclusively Python, bypassing t...

vulnerabilities in Google Android

Google has identified vulnerabilities in Android. Samsung has addressed the vulnerabilities relevant to Samsung Mobile devices in their products. These vulnerabilities include incorrect bounds checking, missing permission checks, integer overflows, improperly initialized pointers, type confusion,...

CVE-2025-32463_sudo_chroot

CVE-2025-32463 - sudo chroot Usage The Dockerfile creates a safe, isolated testing environment with a vulnerable version of sudo 1.9.16p2 installed. This allows you to test the exploit without affecting your host system. Build the vulnerable test environment docker build -t cve . Run the containe...

CVE-2022-0847-Dirty-Pipe-

CVE-2022-0847-Dirty-Pipe- this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline" Max Kellermann, a developer at CM4all a German web hosting company, found it in early 2022 but not by checking for vulnerability. He was debugging when ...

Docker-Runc-Exploit

Docker-Runc-Exploit Docker runc CVE-2019-5736 exploit Dockerfile. Credits : https://github.com/Frichetten/CVE-2019-5736-PoC.git...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag Diagnostic — CVE-2026-43284 A community diagnostic tool to determine whether an XCP-ng dom0 host is exposed to CVE-2026-43284 "Dirty Frag", a local privilege escalation vulnerability in the Linux kernel's xfrm-ESP subsystem. TL;DR — All current XCP-ng releases 8.1, 8.2, 8.3...

jailbreak-iOS12

Jailbreak for iOS 12 iOS 12.0 & 12.1.2 Jailbreak with CVE-2019-6225 An incomplete iOS 12 Jailbreak. For now it only runs the exploit, gets tfp0, gets ROOT, escapes the SandBox, writes a test file to prove the sandbox was escaped then resprings. Feel free to build on top of it as long as you respe...

CVE-2026-103435

A flaw was found in claude-code. An attacker with write access to a shared workspace can achieve arbitrary file modification and privilege escalation by exploiting a time-of-check to time-of-use TOCTOU race condition. By replacing a project file with a symbolic link between the permission check a...

CVE-2026-46434

wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the gymtrainer permission can deactivate any account in the same gym, including gymmanager and generalgymmanager accounts. The UserDeactivateView grants access to anyone holding any one of gym.managegy...

CVE-2023-28252

CVE-2023-28252 The TL;DR for the learnings of Windows Vulnerability CVE-2023-28252 So this weekend I was practising the Aero machine on Hack The Box. The box is so much fun playing it when you can mimic a real-world attack to a Windows 11 machine. After completing it, I was very curious and wanti...

firefox: thunderbird: Privilege escalation in the DOM: Workers component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Workers component...

firefox: Privilege escalation due to invalid pointer in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

wger: Trainer Privilege Escalation - Improper Privilege Management

Summary A user with only the gymtrainer permission can deactivate any account in the same gym, including gymmanager and generalgymmanager accounts. The UserDeactivateView grants access to anyone holding any one of gym.managegym, gym.managegyms, or gym.gymtrainer OR logic via...

GHSA-X249-CX55-2H87 wger: Trainer Privilege Escalation - Improper Privilege Management

Summary A user with only the gymtrainer permission can deactivate any account in the same gym, including gymmanager and generalgymmanager accounts. The UserDeactivateView grants access to anyone holding any one of gym.managegym, gym.managegyms, or gym.gymtrainer OR logic via...

CVE-2024-37081

CVE-2024-37081: Multiple Local Privilege Escalation in VMware vCenter Server The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileg...

CVE-2026-46434 wger: Trainer Privilege Escalation - Improper Privilege Management

wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the gymtrainer permission can deactivate any account in the same gym, including gymmanager and generalgymmanager accounts. The UserDeactivateView grants access to anyone holding any one of gym.managegy...

EUVD-2026-94333

wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the gymtrainer permission can deactivate any account in the same gym, including gymmanager and generalgymmanager accounts. The UserDeactivateView grants access to anyone holding any one of gym.managegy...

CVE-2026-46434

The fitness manager wger is vulnerable to a privilege escalation flaw in versions prior to 2.6 due to improper permission management (CWE-269 ). The UserDeactivateView (and UserActivateView) allows any user with the gym.gym_trainer permission to deactivate any account within the same gym, includi...

CVE-2026-46434 wger: Trainer Privilege Escalation - Improper Privilege Management

wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the gymtrainer permission can deactivate any account in the same gym, including gymmanager and generalgymmanager accounts. The UserDeactivateView grants access to anyone holding any one of gym.managegy...