CVE-2020-0796

CVE-2020-0796 Exploit de LPE en SMBv3 de Windows Autores Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso Análisis del exploit Análisis de PoC por SungLin Knownsec 404 Team Análisis+PoC de @ZecOps Referencias...

CVE-2021-4034

CVE-2021-4034 polkit pkexec Local Privilege Vulnerability to Add custom commands change to https://github.com/signfind/CVE-2021-4034 Cancel the /bin/sh interactive shell Suitable for one-line command execution in special cases Build gcc cve-2021-4034.c -o cve RCE...

CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-

このリポジトリには README がありません。...

CVE-2026-57042

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58766

A logic error in multiple functions of arm-smmu-v3.c enables a possible local escalation of privilege . This vulnerability allows for privilege elevation without requiring additional execution privileges or user interaction. Exploitation details are not provided in the documentation.

CVE-2026-58744

The software is susceptible to a local escalation of privilege due to improper input validation in multiple locations. This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. While the specific affected components or...

CVE-2026-58695

In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56992

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56985

CVE-2026-56985 affects Google Pixel devices, specifically impacting the KeyMint component. A type confusion vulnerability in multiple files allows an attacker to obtain signatures, potentially leading to a local escalation of privilege (EoP). Exploitation does not require additional execution pri...

CVE-2026-49927

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49887

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28620

In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-83498

CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...

EUVD-2026-73704

Heap-based buffer overflow in Windows Online Certificate Status Protocol OCSP allows an authorized attacker to elevate privileges locally...

Wear OS Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage a...

CVE-2021-24664

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:09+00:00| seen| https://t.me/hackingAttack/31523 2026-09-02 01:02:35+00:00| seen| https://t.me/hackingAttack/31523 2026-09-07 05:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/31523 2026-09-08 00:00:59+00:00|...

PUB-A-511555858

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Local privilege escalation due to DLL hijacking vulnerability

...

Uninitialized local variables

Lines of code Vulnerability details Impact Configuration -Check: uninitialized-local -Severity: Medium -Confidence: Medium -Description:.Lender.approveaddress,uint256,address.i Lender.sol87 is a local variable never initialized.A smart contract with uninitialized local variables may lead to...

ipv6-multicast-mld-list NSE Script

Uses Multicast Listener Discovery to list the multicast addresses subscribed to by IPv6 multicast listeners on the link-local scope. Addresses in the IANA IPv6 Multicast Address Space Registry have their descriptions listed. Script Arguments ipv6-multicast-mld-list.timeout timeout to wait for...