CoD-MW-Warzone-2---CVE-2023-38821

CoD-MW-Warzone-2 - CVE-2023-38821 DLL Planting in the CoD MW Warzone 2 - CVE-2023-38821 Discoverer: Idan Malihi Description An issue in Activision Call of Duty Modern Warfare: Warzone v.2 allows a local attacker to execute arbitrary code via a crafted file to the UMPDC.dll, MSIMG32.dll,...

CVE-2026-43284

Dirty Frag - kernel Linux critical Vulnerability- CVE-2026-43284 📚 Introduction The exploit chain, classified as a Local Privilege Escalation LPE , allows an unprivileged user to obtain root access on virtually all modern Linux distributions running kernels released since 2017, spanning...

sentric-core

SENTRIC Autonomous AI agent with its own cryptographic identity. It hunts CVEs, builds isolated exploit labs, validates vulnerabilities with working PoCs, and funds itself by trading crypto — 24/7, with no human in the loop. Built by one person on a home PC. Portugal, 2026. The problem it solves...

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Extra in the Content - News Menu. Attack Vectors: Scripting A vulnerability in the sanitization o...

CVE-2023-44762_ConcreteCMS-Reflected-XSS---Tags

ConcreteCMS Reflected XSS v.9.2.1 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the Tags from Settings - Tags. Attack Vectors: Scripting a vulnerability in the sanitization of the ent...

CVE-2023-40297

CVE-2023-40297 Stakater Forecastle = v1.0.144 allows directory traversal in the website component Vulnerability Type Directory Traversal Vendor of Product Stakater Affected Product Code Base Forecastle = v1.0.144 Affected Component Affected components: URL - https://www.example.com/%5C../etc/pass...

Fragnesia

Local Privilege Escalation CVE-2026-46300 Usage: CGOENABLED=0 go build -ldflags="-s -w" -o fragnesia . ./fragnesia Affected Versions: Ubuntu 16.04 LTS RHEL 8,9 Rocky Linux 8,9,10 CentOS Stream 8,9,10 Oracle Linux 8,9 openEuler 20.03-LTS-SP4 22.03-LTS-SP3 22.03-LTS-SP4 24.03-LTS 24.03-LTS-SP1...

cve-lfi-lab

🧠 CVE Lab: Tier 1 SOC Analyst Simulation CVE-2025-39507 | Local File Inclusion in WordPress Nasa Core Plugin 📝 Scenario: A Day in the SOC It’s a regular Monday. I’m logged into the SOC dashboard, reviewing alerts like usual. One comes in that catches my eye: ALERT: Possible Local File Inclusion L...

DirtyFrag

Local Privilege Escalation / Container Escape CVE-2026-43284 / CVE-2026-43500 Usage: CGOENABLED=0 go build -ldflags="-s -w" -o dirtyfrag . ./dirtyfrag Affected Versions: Ubuntu 24.04.4 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS 14.04 LTS RHEL 8.x,9.x,10.1 CentOS 8,9,10 Rocky Linux 8,9,...

CVE-2026-0073-Android-adbd-authentication-bypass

Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should wo...

CVE-2026-98385

A flaw was found in the Linux kernel. A race condition when switching memory management contexts allows the process scheduler to access memory that has already been freed, leading to a use-after-free condition. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by...

CVE-2023-3897

CVE-2023-3897 Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

CVE-2026-38765

CVE-2026-38765 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-38764

CVE-2026-38764 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

CVE-2026-31431_je_sappelle_RoOt

CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! 📌 Repository Purpose This repository documents the CVE-2026-31431 vulnerability, nicknamed Copy Fail , and provides a defensive remediation procedure for potentially exposed Linux systems. ⚠️ This repository is strictly focused on defense, authorize...

CVE-2024-1086-Exploit

🔒 CVE-2024-1086 Exploit Project 🛡️ Polished educational Linux kernel exploit for security research This project provides a robust, non-functional template for studying CVE-2024-1086, a use-after-free vulnerability in the Linux kernel's netfilter: nftables component, enabling local privilege...

CVE-2023-31716

CVE-2023-31716 Name Affected product: FUXA Version affected: = 1.1.12 Problem: Local File Inclusion Description: FUXA 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...

CVE-2026-23111-nftables-lab

CVE-2026-23111 nftables LPE: exposure check and safe lab Defensive tooling and a reproducible virtual-machine lab for CVE-2026-23111, the nftables use-after-free local privilege escalation in the Linux kernel an inverted element-activity check in nftmapcatchallactivate, the "off by !" bug. An...