smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii Sfruttare la System Management Mode con un interrupt molto molto molto molto molto molto molto lungo. Panoramica Si scopre che puoi rompere la SMM — l'ambiente di esecuzione sicuro e ultra privilegiato che gira invisibilmente in background su ogni CPU x86 — con niente più di...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

CVE-2024-7344

🐞 CVE-2024-7344: Caricamento Improprio di Immagini PE Questo repository contiene materiale di ricerca relativo a CVE-2024-7344, una vulnerabilità di bypass di Secure Boot che interessa i sistemi UEFI. Centralizza l'analisi tecnica della vulnerabilità, la documentazione del flusso di attacco e le...

CVE-2026-40897

CVE-2026-40897 Esecuzione di Codice Remota nel Parser di Espressioni di Math.js ★ CVE-2026-40897 Esecuzione di Codice Remota in Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Panoramica CVE-2026-40897 è una vulnerabilità di Bypass della Sandbox che...

CVE-2025-4138

CVE-2025-4138 Python-Tarfile-Modul Verzeichnis-Traversal-Schwachstelle mit Overflow über Verzeichnisgrenzen hinweg Auswirkung : Privilegienerweiterung Funktionsweise : Die TarFile.extractall- und TarFile.extract-Methoden von Python unterstützen ein Feature, mit dem ein Filter gesetzt werden kann,...

fusee-gelee

fusee-gelee Un'implementazione dell'exploit Fusee Gelee CVE-2018-6242 per Nintendo Switch, basata sulla vulnerabilità divulgata da Kate Temkin / ReSwitched a marzo 2018. Consente di avviare un payload arbitrario ad es. hekate su un dispositivo Tegra X1 in modalità recovery USB RCM, bypassando...

ServiceCheater

ServiceCheater Poc di CVE-2020-0113 & CVE-2020-0108 Analisi della vulnerabilità di escalation dei privilegi del servizio in primo piano su Android Contesto della vulnerabilità Nel patch di AOSP di agosto 2020, è stata divulgata una vulnerabilità nel framework AMS, numerata CVE-2020-0108, con...

EUVD-2026-67961

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader...

EUVD-2026-67962

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

EUVD-2026-66394

The getgrav/grav-plugin-api plugin before 1.0.18 does not enforce API-key scope in the requireNotSuperTarget function in UsersController.php across seven sensitive user-management endpoints. The check uses isSuperAdmin on the acting account rather than verifying whether the specific API key carri...

EUVD-2026-66385

StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type routed through AuthorizerStmtVisitor calls into Authorizer before execution, but visitDropMaterializedViewStatement returns immediately with a comment stating the check happens...

EUVD-2026-66215

Kimai before 2.62.0 fails to validate createothertimesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with viewothertimesheet and editothertimesheet permissions can create timesheet records for team members by submitting the QuickEntry form, bypassin...

PT-2026-83453

Name of the Vulnerable Software and Affected Versions sudo versions prior to 1.9.17p3 Description In ptrace-based intercept mode, the software fails to apply intercept policy checks to the execveat system call. This allows users who are permitted to run specific commands to execute denied program...

PT-2026-83455

Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata fetcher, allowing unauthenticated attackers to bypass IP validation. Attackers can make the server request internal hosts in that range including cloud metadata services and read...

PT-2026-83433

Name of the Vulnerable Software and Affected Versions Omnivore API packages/api versions prior to commit abf53d6 Description An authentication bypass exists in the Apple sign-in token verification process. The decodeAppleToken function extracts the alg field from the JWT header provided by the us...

PT-2026-83496

Name of the Vulnerable Software and Affected Versions SAML Single Sign On – SSO Login plugin for WordPress versions prior to 5.4.7 Description An authentication bypass exists due to the mo saml login validate ACS handler persisting the X.509 certificate extracted from an incoming SAMLResponse int...

PT-2026-83431

rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, and delete user accounts by directly accessing unprotected...

RToolZ

RToolZ एक स्टील्थी Lsass डंपर - PPL Lsass को डंप करने के लिए ProcExp152.sys ड्राइवर का दुरुपयोग कर सकता है। इसमें इतना खास क्या है? MiniDump या किसी भी dbghelp.lib विधियों को कॉल नहीं किया जाता, सारी डंपिंग प्रक्रिया डंपर द्वारा मैन्युअल रूप से की जाती है, साथ ही अनावश्यक DLLs को हटाकर डंप आकार क...

POC

POC Solo a scopo di ricerca! Una raccolta pubblica di POC & Exploit per le vulnerabilità che ho scoperto. CVE-2022-22583 PackageKit : Un'applicazione potrebbe essere in grado di accedere a file riservati SIP Bypass CVE-2022-26690 PackageKit : Un'applicazione dannosa potrebbe essere in grado di...

CVE-2024-48910-PoC

CVE-2024-48910-PoC Panoramica CVE-2024-48910 DOMPurify, un sanitizer XSS per HTML, MathML e SVG basato esclusivamente sul DOM, super veloce ed estremamente tollerante, è risultato vulnerabile alla prototype pollution CVE-2024-48910. La vulnerabilità è stata scoperta e corretta nella versione 2.4....