CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo local privilage escalation workflow and POC CVE-2024-32019 Workflow Automatic exploit Resources Workflow !TIP Please read Netdata is a tool that provides apps and systems monitoring, it runs at port 19999, easy to find: test@test:$ netstat -tuln Active Internet...

CVE-2026-108945

A code injection vulnerability exists in the iMoonLab yolov13 project (up to version 73289949533efac82bb5f72ec19b746618656bd2) within the AutoBackend Model Loading component. The flaw originates from the use of the eval function in the file ultralytics/nn/autobackend.py. By manipulating the imgsz...

EUVD-2026-98204

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

CVE-2026-108945 iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

CVE-2026-108945 iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

cve-2022-0847dirtypipe-exploit

cve-2022-0847dirtypipe-exploit...

CVE-2014-4688-NodeJs-Exploit

CVE-2014-4688 sudo node --no-warnings exploit.js...

phonepe-sensitive-data-exposure-cve-2025-5154

-Insecure-Local-Storage-of-Sensitive-User-Data-in-PhonePe-Android-App-Unpatched- Discovered byhc4 Date Reported: April 2025 CVE Status: CVE Requested Pending CVE Request 1862785 for CVE ID Reques 📌 Overview A critical local vulnerability was discovered in the PhonePe Android app tested on...

CVE-2020-13886

PoC: https://youtu.be/nNKBRx8IglI ------------------------------------------------------------------------------------------------------------- ------------- 0day: TELEFONE IP TIP200/200 LITE & TIP 300 | Local File Include | ---------------------------- ------------------------------- P0c Author:...

CVE-2017-7472

CVE-2017-7472 The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service memory consumption via a series of KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring calls. Shortcut Vulnerable kernel 4.10.13...

CVE-2025-2294

CVE-2025-2294 Introduction CVE-2025-2294 is a critical Local File Inclusion LFI vulnerability in the Kubio AI Page Builder plugin for WordPress. The vulnerability allows an unauthenticated remote attacker to pass a specially crafted parameter, causing the plugin to include an arbitrary file on th...

EUVD-2026-98087

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

EUVD-2026-98179

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

EUVD-2026-98168

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...

EUVD-2026-98088

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account...

EUVD-2026-98170

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

EUVD-2026-98086

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...

EUVD-2026-98166

Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library CVE-2025-26240 for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch intern...

EUVD-2023-60713

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback...

EUVD-2026-98203

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...