CVE-2026-102369

Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An unauthenticated attacker on the same local network can replay login challenge data to obtain an administrative session, enable a privileged service th...

CVE-2026-28372-GNU-inetutils-telnetd-Privilege-Escalation-main

CVE-2026-28372 — Повышение привилегий в GNU inetutils telnetd — PoC 👤 Автор Mohammed Idrees Banyamer Иордания 🇯🇴 Instagram: @banyamersecurity Исследователь безопасности | Наступательная безопасность | Разработка эксплойтов 🧨 Название эксплойта CVE‑2026‑28372 — Повышение привилегий в GNU inetutils...

CVE-2025-32463

CVE-2025-32463 🚨 Повышение привилегий до root с помощьюsudo chroot. Компилятор gcc не требуется. 🚀 Что такое CVE-2025-32463? CVE-2025-32463 — это уязвимость в Linux, которая позволяет локальному атакующему повысить привилегии до root, злоупотребляя командой sudo chroot. В отличие от аналогичных...

CVE-2026-47599

A flaw was found in the NVIDIA GPU Display Driver open-source kernel module. An unprivileged local attacker can exploit improper preservation of memory access permissions during Direct Memory Access DMA mapping, which controls how the graphics hardware accesses system memory. Successful...

CVE-2025-60595

CVE-2025-60595 SPH Engineering UgCS 5.13.0 уязвим к произвольному выполнению кода. Это публичная ссылка для использования на сайте CVE Произвольное выполнение кода в продукте, принадлежащем SPH Engineering. UGCS 5.13.0! Ardupilot/mavparse.py, строки 230–243: на GitHub SPH Engineering видно, что...

cve-2026-31431-mitigation

Скрипт для смягчения CVE-2026-31431 Этот репозиторий предоставляет временный скрипт для смягчения последствий и отката изменений для CVE-2026-31431 — уязвимости локального повышения привилегий в ядре Linux. Отказ от ответственности Это временное решение, а не постоянное исправление. Используйте н...

CVE-2026-20805-PoC

CVE-2026-20805 PoC Microsoft Desktop Window Managerdwm.exe의 정보 노출 취약점을 입증하는 개념 증명PoC입니다. 개요 이 저장소에는 Windows Desktop Window Manager 프로세스에 영향을 미치는 정보 노출 취약점인 CVE-2026-20805를 재현하기 위해 개발된 맞춤형 개념 증명PoC이 포함되어 있습니다. 이 취약점은 ALPC 관련 구조체의 부적절한 처리로 인해 로컬 인증 사용자가 커널 객체 포인터를 유출할 수 있게 하며, 잠재적으로 KASLR커널 주소 공간...

CVE-2024-53522

CVE-2024-53522 Эксплойт PoC для CVE-2024-53522 Этот репозиторий содержит Proof of Concept PoC для CVE-2024-53522 — уязвимости, обнаруженной компанией Safecloud Co., Ltd. Подробную информацию об уязвимости можно найти в нашем блоге: CVE-2024-53522: HOSxP Software 0day Discover & Exploitation Обзор...

EUVD-2026-90969

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not...

CVE-2026-12542 Foreman: command injection in foreman-tail

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not...

CVE-2026-12542

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not...

firewall-cve

firewall-cve Уязвимость обхода функции безопасности правил брандмауэра Windows AppContainer CVE-2021-41338 Дата выпуска: 12 октября 2021 г. Назначенный CNA: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Вектор атаки Локальный Сложность атаки Низкая Требуемые привилегии Низкие Взаимодействие с...

MCP Atlassian: Insecure File Permissions on OAuth Token Storage

SummaryThe OAuth token fallback file storage in OAuthConfig.savetokenstofile creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obtain fu...

CVE-2021-46702

CVE-2021-46702 Описание: Tor Browser 9.0.7 на Windows 10 сборки 10586 подвержен утечке информации. Это может позволить локальным злоумышленникам обойти предусмотренную функцию анонимности и получить информацию о луковых сервисах, посещённых локальным пользователем. Это можно сделать путём анализа...

tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race condition

A flaw was found in Apache Tomcat. A Time-of-check Time-of-use TOCTOU race condition exists when creating Unix domain sockets. This vulnerability allows an unauthorized local user to exploit the timing window to gain access to the Unix domain socket. This could lead to information disclosure or...

EUVD-2026-90898

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CVE-2026-13043

WatchGuard endpoint security products are affected by a missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) . A local, authenticated attacker can bypass the driver's access-control handshake to issue arbitrary privileged commands. This flaw allows for the disclosure o...

not-a-mused

not-a-mused Musehttps://muse.ai의 로컬 취약점 0day에 대한 개념 증명으로, 권한이 없는 로컬 프로세스가 Muse의 받아쓰기 트래픽을 리다이렉트하고 앱에 부여된 신뢰/접근 권한을 악용할 수 있게 해줍니다. 무엇을 보여주는가 Muse는 문서화되지 않은 설정을 노출합니다: endovoyagerdictationendpoint 로컬 공격자나 악성코드는 특별한 권한 없이 이 엔드포인트를 수정할 수 있습니다. 리다이렉트되면 받아쓰기 프롬프트가 공격자가 제어하는 엔드포인트로 전송될 수 있으며, 잠재적으로 다음이...

CVE-2026-79899

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...

CVE-2019-1388-Privilege-Escalation--2021-

CVE-2019-1388 Privilege Escalation CVE-2019-1388 Lab Analysis: Documented local privilege escalation via Windows UAC certificate dialogs on Windows 7. CVE-2019-1388: Windows UAC Privilege Escalation Lab An educational cybersecurity lab and technical analysis documenting CVE-2019-1388 —a local...