Joplin 3.3.3 Server - Privilege Escalation

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, a privilege escalation vulnerability exists in the Joplin server, allowing non-admin users to exploit the API endpoint PATCH /api/users/-id t...

MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation

The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation of the Apple login feature. This allows unauthenticated attackers to log in as any user as long as they know the user's...

Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it...

Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...

WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation

Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture = 2.0.3.1 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions. id: CVE-2026-27542 info: name: WooCommerce Wholesale Le...

HyperComments <= 1.2.2 - Arbitrary Options Update

The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to...

Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

The Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...

Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

The Simple User Registration plugin ≤ 6.3 is vulnerable to privilege escalation. It lacks proper restrictions on user meta values during registration. Unauthenticated attackers can exploit this to register as administrators. id: CVE-2025-4334 info: name: Simple User Registration = 6.3 -...

CVE-2021-22555-Exploit

CVE-2021-22555-Exploit Exploit CVE-2021-22555 Por Andy Nguyen INFORMAÇÕES Uma escrita fora dos limites do heap que afeta o Linux desde v2.6.19-rc1 foi descoberta em net/netfilter/xtables.c. Isso permite que um invasor obtenha privilégios ou cause um DoS através de corrupção de memória do heap por...

CVE-2017-16995

CVE-2017-16995 Dieses Repository enthält 2 Exploit-Programme in C von ExploitDB zur Privilegieneskalation unter Ubuntu 16.04 unter Ausnutzung der Schwachstelle CVE-2017-16995. 📂 Dateiliste 44298.c 45010.c Beide sind Exploits mit unterschiedlichen Methoden, die verwendet werden können, um...

CVE-2026-6741

CVE-2026-6741 CVE-2026-6741 ist eine Schwachstelle mit CVSS-Score 8.8 High zur Authenticated Agent+ Privilege Escalation im LatePoint – Calendar Booking Plugin CVE-2026-6741 — LatePoint-Privilege-Escalation-Scanner Plugin: LatePoint – Calendar Booking Plugin for Appointments and Events latepoint...

CVE-2023-36899

CVE-2023-36899 Ambiente di riproduzione e strumenti per la vulnerabilità CVE-2023-36899, relativa al bypass dell'autenticazione di sessione senza cookie in ASP.NET Framework. Cookieless DuoDrop: bypass dell'autenticazione IIS e privesc del pool di applicazioni in ASP.NET Framework CVE-2023-36899...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 è un problema di sicurezza nel firmware dell'hypervisor di alcuni chipset Qualcomm meno recenti. Un componente hardware non protetto il "boot remapper" può essere abusato per ottenere accesso completo in lettura/scrittura all'hypervisor da un sistema operativo...

CVE-2025-6254

CVE-2025-6254 python exploit.py -u http://localhost:8080 python exploit.py -f targets.txt -T 50 -t 8 python exploit.py -f targets.txt -o sonuclar.txt --role editor CVE-2025-6254 - Doctreat Core = 1.6.8 Escalation dei privilegi non autenticata UTILIZZA SOLO NEL TUO AMBIENTE DI TEST...

2026-11551

2026-11551 CVE-2026-11551: Branda Plugin - Nicht authentifizierte Privilegienausweitung durch Kontoübernahme...

HVCIPwned

CVE-2024-35250 Elevazione locale dei privilegi tramite dereferenziazione di puntatore non attendibile nel driver Kernel Streaming di Windows ks.sys. Exploit basato solo su dati — bypassa la Code Integrity protetta da hypervisor HVCI. Riepilogo Campo| Dettaglio ---|--- CVE| CVE-2024-35250...

derpyc0w

Disclaimer Non sono responsabile di qualsiasi cosa tu faccia con questo codice. Questo codice è fornito senza garanzia. Description Exploit per CVE-2016-5195 che mappa un eseguibile SUID di sola lettura in memoria sola lettura e usa la race condition per sovrascriverlo con un ELF a nostra scelta....

cve-2023-22515

CVE-2023-22515 Hier wird die Vorgehensweise zur Ausnutzung der Schwachstelle über Burp Suite beschrieben. Für die Ausnutzung ist es erforderlich, den Wert des Attributs bootstrapStatusProvider.applicationConfig.setupComplete auf false zu ändern, also die folgende Anfrage auszuführen: Anfrage zum...

CVE-2022-0847

CVE-2022-0847 Vulnerabilidade no kernel Linux desde a versão 5.8 que permite sobrescrever dados em arquivos arbitrários somente leitura. Isso leva à escalada de privilégios porque processos não privilegiados podem injetar código em processos root. Para compilar: gcc poc.c -o poc Uso: ./poc...

CVE-2020-27194

CVE-2020-27194 mio exp per CVE-2020-27194, testato su kernel Linux 5.8.14. Maggiori dettagli : https://ama2in9.top/2020/12/14/CVE-2020-27194/ riferimento CVE-2020-8835 pwn2own 2020 ebpf 提权漏洞分析 CVE-2020-8835 pwn2own 2020 ebpf 通过任意读写提权分析...