289832 matches found
-Grafana-LFI-CVE-2021-43798
π Grafana LFI Exploit CVE-2021-43798 Automation script in Python 3 to exploit the Local File Inclusion LFI vulnerability in Grafana versions 8.0.0 to 8.3.0. This exploit allows directory traversal to read sensitive operating system files without authentication. β¨ Features Python 3.10+ compatibili...
OverlayFS-LPE-Exploit
OverlayFS-LPE-Exploit OverlayFS Local Privilege Escalation CVE-2021-3493 Project Overview This repository contains documentation and exploit code for a Local Privilege Escalation LPE vulnerability found in the Ubuntu Linux kernel. This was tested in a TryHackMe lab environment. Lab Highlights...
WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by JoΓ£o Pedro S AlcΓ’ntara Kinorth in WordPress Theme Backhoe versions = 2.0...
GHSA-V36G-JCW9-X7CW Pydantic AI: Excessive resource use when local web fetching converts nested HTML
Summary Applications using Pydantic AI's local web-fetch tool can experience excessive CPU and memory use when it converts attacker-controlled HTML. An agent must fetch the affected page; provider-native web fetching is not affected. Details Nested block elements cause HTML-to-Markdown conversion...
Pydantic AI: Excessive resource use when local web fetching converts nested HTML
Summary Applications using Pydantic AI's local web-fetch tool can experience excessive CPU and memory use when it converts attacker-controlled HTML. An agent must fetch the affected page; provider-native web fetching is not affected. Details Nested block elements cause HTML-to-Markdown conversion...
WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by JoΓ£o Pedro S AlcΓ’ntara Kinorth in WordPress Theme Ozeum versions = 1.3.0...
WordPress Flipmart theme <= 2.8 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by JoΓ£o Pedro S AlcΓ’ntara Kinorth in WordPress Theme Flipmart versions = 2.8...
WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by JoΓ£o Pedro S AlcΓ’ntara Kinorth in WordPress Theme Teoro versions = 1.1...
WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by JoΓ£o Pedro S AlcΓ’ntara Kinorth in WordPress Theme Fabius versions = 1.0...
Important: Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview
A new satellite/iop-vulnerability-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages...
WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by JoΓ£o Pedro S AlcΓ’ntara Kinorth in WordPress Theme Kaven versions = 1.2...
CVE-2026-107332 Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code
Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later...
CVE-2026-107332 Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code
Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later...
EUVD-2026-95128
Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later...
CVE-2026-107332
The AWS Toolkit for Visual Studio Code contains insecure file permissions in the CodeCatalyst connection handler in versions prior to 4.10.0 . This vulnerability allows local users to obtain CodeCatalyst bearer tokens by reading world-readable token cache files. To remediate this issue, users sho...
CVE-2026-25964
CVE-2026-25964 PoC - Tandoor Recipes Authenticated LFI Proof-of-Concept for Authenticated Local File Disclosure via Recipe Import Disclosure: Originally reported by me via GHSA-6485-jr28-52xx β οΈ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID|...
sudo-chroot
Description: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. Local Privilege Escalation by sudo-chroot -R...
CVE-2021-4034-Rust
CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust. Build instructions Install rust if you haven't already git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build --release Vuln Check check for pkexec which...
pack2theroot-lab
Pack2TheRoot Lab β CVE-2026-41651 A Dockerised, CTF-style local-privilege-escalation lab built around the Pack2TheRoot advisory CVE-2026-41651, a 12-year-old flaw in the PackageKit daemon disclosed by Deutsche Telekom's Red Team on 22 April 2026. The lab includes three containers : a...
EUVD-2026-95121
In OpenStack Mistral through 23.0.0, the std.sshproxied action passes a caller-supplied proxycommand value directly to paramiko.ProxyCommand before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an...