WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Teoro versions = 1.1...

WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Fabius versions = 1.0...

Important: Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

A new satellite/iop-vulnerability-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages...

WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Kaven versions = 1.2...

CVE-2026-107332 Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code

Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later...

EUVD-2026-95128

Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later...

CVE-2026-107332

The AWS Toolkit for Visual Studio Code contains insecure file permissions in the CodeCatalyst connection handler in versions prior to 4.10.0 . This vulnerability allows local users to obtain CodeCatalyst bearer tokens by reading world-readable token cache files. To remediate this issue, users sho...

CVE-2026-107332 Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code

Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later...

CVE-2026-25964

CVE-2026-25964 PoC - Tandoor Recipes Authenticated LFI Proof-of-Concept for Authenticated Local File Disclosure via Recipe Import Disclosure: Originally reported by me via GHSA-6485-jr28-52xx ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID|...

sudo-chroot

Description: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. Local Privilege Escalation by sudo-chroot -R...

CVE-2021-4034-Rust

CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust. Build instructions Install rust if you haven't already git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build --release Vuln Check check for pkexec which...

pack2theroot-lab

Pack2TheRoot Lab — CVE-2026-41651 A Dockerised, CTF-style local-privilege-escalation lab built around the Pack2TheRoot advisory CVE-2026-41651, a 12-year-old flaw in the PackageKit daemon disclosed by Deutsche Telekom's Red Team on 22 April 2026. The lab includes three containers : a...

EUVD-2026-95121

In OpenStack Mistral through 23.0.0, the std.sshproxied action passes a caller-supplied proxycommand value directly to paramiko.ProxyCommand before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an...

CVE-2026-93858

In OpenStack Mistral through 23.0.0, the std.sshproxied action passes a caller-supplied proxycommand value directly to paramiko.ProxyCommand before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an...

CVE-2026-93858

In OpenStack Mistral through 23.0.0, the std.sshproxied action passes a caller-supplied proxycommand value directly to paramiko.ProxyCommand before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an...

CVE-2026-93858

In OpenStack Mistral through 23.0.0, the std.sshproxied action passes a caller-supplied proxycommand value directly to paramiko.ProxyCommand before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an...

CVE-2026-93858

In OpenStack Mistral through 23.0.0, the std.sshproxied action passes a caller-supplied proxycommand value directly to paramiko.ProxyCommand before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an...

copy-fail-go

Copy Fail - CVE-2026-31431 - golang version ⚠️ WARNING: This program is highly dangerous and experimental. Manual cleanup is required to clear the exploit. Use at your own risk! Technical Writeup original repo run check /usr/bin/su before run: user@pc:$ hexdump -n 300 -x /usr/bin/su 0000000 457f...

CVE-2026-34036

CVE-2026-34036 Proof-of-concept script for CVE-2026-34036 , an authenticated local file inclusion / LFI in Dolibarr. The issue is reachable through core/ajax/selectobject.php. An authenticated user can abuse the objectdesc parameter to make the application read arbitrary local files on the server...

Copy_Grail

copygrail | copy-fail-CVE-2026-31431 copygrail is a compact, single-file C++ implementation of the CVE-2026-31431 "Copy Fail" local privilege escalation vulnerability. It showcases a clean AFALG + splice page cache corruption technique that can be used to overwrite a setuid binary and escalate...