TowelRoot

What is TowelRoot? Towelroot gains root access by exploiting a vulnerability in the kernel of Android, which is based on Linux and is a very basic component of the device that basically acts as a middle-man to make the operating system and the physical hardware talk to one another...

CVE-2014-3153

This repository does not have a README...

towelroot

towelroot Research of CVE-2014-3153 and its famous exploit towelroot on IA x86 This job has DONE, but I can't leak the code, someone in my company has challenged me : Compile gcc -fno-stack-protector -m32 -O0 -pthread towelroot.c -o towelroot...

Linux-kernel-code-injection_CVE-2014-3153

This repository does not have a README...

pwnacle-fusion

pwnacle-fusion Automated exploit for Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Credits to @misssudo for the disclosure Usage: ./pwnacle.rb targeturl payloadurl This exploit uses both CVEs to upload a .jsp shell from your payloadurl which is then reachable from /reports/images/shell.jsp...

CVE-2014-3153

This repository does not have a README...

CVE-2014-3153-exploit

CVE-2014-3153-exploit My exploit for kernel exploitation...

CVE-2026-3153

creationtimestamp| type| source ---|---|--- 2026-02-25 17:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfp6vog7ey24...

CVE-2026-3153

A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

CVE-2026-3153 itsourcecode Document Management System register.php sql injection

A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

openSUSE Security Advisory (SUSE-SU-2026:0290-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: libopenvswitch-3_1-0 / libovn-23_03-0 / openvswitch3 / etc (SUSE-SU-2026:0290-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0290-1 advisory. Update to v3.1.7: - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload...

SUSE: Security Advisory (SUSE-SU-2026:0280-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2026:0280-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.332.b09-1.el7 (AXSA:2022-3153:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3153:03 advisory. OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling craft...

Linux Distros Unpatched Vulnerability : CVE-2016-3153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the...

VulnCheck KEV: CVE-2012-3153

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. NOTE: the previous information is from the October 2012 CPU...

CVE-2024-3153

mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint, leading to a denial of service DOS condition. Specifically, the server can be shut down by sending an invalid upload request. An attacker with the ability to upload documents...

CVE-2025-3153

creationtimestamp| type| source ---|---|--- 2025-04-03 03:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lluwbcqnqs2i 2025-04-03 05:12:02+00:00| seen| https://t.me/cvedetector/21935 2025-04-03 14:35:21+00:00| published-proof-of-concept|...

CVE-2025-3153 Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 - CSRF and XSS in Concrete CMS Custom Address attribute

Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 are vulnerable to CSRF and XSS in the Concrete CMS Address attribute because addresses are not properly sanitized in the output when a country is not specified. Attackers are limited to individuals whom a site administrator has...