CVE-2026-73318

XenForo versions before 2.3.13 contain a missing authorization flaw in the force-agreement controller . Any ACP administrator can access and submit force-agreement forms regardless of their assigned permissions, bypassing the option permission declared in the navigation configuration. This allows...

gtfobins-cli

🚀 GTFOBins CLI Descripción general GTFOBins CLI es una interfaz de línea de comandos para GTFOBins, que proporciona acceso instantáneo a técnicas de explotación de binarios Unix. Esta herramienta ayuda a profesionales de seguridad y administradores de sistemas a identificar y comprender cómo se...

CVE-2025-29927

CVE-2025-29927 Next.Js permission bypass vulnerability CVE-2025-29927 More PoCs at https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X path default /, multi-thread default 10 Batch detection: python poc.py -f url.txt -p /path -t 10 Single detection: python poc.py -u your-ip -p /path -t 10...

CVE-2023-42442

CVE-2023-42442 CVE-2023-42442 JumpServer Session Recording Arbitrary Download Vulnerability Vulnerability Description CVE-2023-42442 is a combination vulnerability involving two bugs in Jumpserver 1. Unauthorized API access leading to session information disclosure 2. Directory permission bypass...

CVE-2023-2640-CVE-2023-32629

GameOverlay Ubuntu Privilege Escalation CVE-2023-2640 https://www.cvedetails.com/cve/CVE-2023-2640/ On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may set privileged extended attributes on t...

CVE-2022-0492

CVE-2022-0492 Container Escape Analysis toc Vulnerability Overview Vulnerability ID: CVE-2022-0492 Vulnerable Product: linux kernel - cgroup Affected Versions: linux kernel 5.17-rc3 Vulnerability Impact: When a container does not have additional security measures enabled, an attacker with root...

Nginx-CVE-2013-4547

Nginx Filename Logic Vulnerability CVE-2013-4547 Vulnerability Description Affected versions: Nginx 0.8.41 1.4.3 / 1.5.0 1.5.7 Reference links: https://vulners.com/cve/CVE-2013-4547 https://blog.werner.wiki/file-resolution-vulnerability-nginx/ http://www.91ri.org/9064.html Vulnerability Descripti...

CVE-2026-28576-poc

CVE-2026-28576: SQL Injection in the Android Contacts Provider One picked contact, every contact: a targetSdk compat gate turns a single-contact picker grant into a full contacts database dump. Android 17 hardened the Contacts Provider against SQL injection with setStrictColumns / setStrictGramma...

CVE-2025-10184_PoC

APK Build for CVE‑2025‑10184 PoC This is an APK Build for a PoC of CVE‑2025‑10184 The vulnerability exists in com..providers.telephony, allowing arbitrary applications to read SMS messages without SMS read permission Source Code The source code and more details can be found in Rapid7's article:...

TeamViewer_Permissions_Hook_V1

TeamViewer Permissions Hook V1 A proof of concept injectable C++ DLL, that uses naked inline hooking and direct memory modification to change TeamViewer permissions. Features As the Server - Enables extra menu item options on the right side pop-up menu. Most useful so far to enable the "switch...

CVE-2026-86493

In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards...

CVE-2026-86498

JetBrains YouTrack before versions 2025.3.160480 and 2026.1.14047 is affected by an authorization flaw: PUT requests on link sub-resources allowed modification of linked entities without requiring the update permission. The issue carries a CVSS v3.1 score of 7.7 (HIGH) with a changed scope , indi...

CVE-2026-86498

In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission...

CVE-2024-23700

CVE-2024-23700 - Android Companion Device Privilege Escalation PoC This project demonstrates CVE-2024-23700, a privilege escalation vulnerability related to the Companion Device mechanism on Android. The PoC shows how an app can exploit the companion device association flow to obtain certain...

CVE-2025-55130

CVE-2025-55130 - Node.js Permission Model Symlink Escape root@kitploit: / | | | | |/ \ / \ | | | | / | // \ | | || | || || || | | | | \ | \ \ | | | | | | |/|| \ ||| ||/||| | || | || | |/ |//||// Node.js Permission Model Bypass via Crafted Symlinks Discovered by natann @ JFrog Overview A path...

CVE-2026-86177 Pterodactyl Panel before 1.14.1 Privilege Escalation via Schedule Tasks

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedule.update permission to execute arbitrary console commands. Attackers can create and immediately trigger scheduled tasks that run game-server console command...

CVE-2026-86177 Pterodactyl Panel before 1.14.1 Privilege Escalation via Schedule Tasks

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedule.update permission to execute arbitrary console commands. Attackers can create and immediately trigger scheduled tasks that run game-server console command...

CVE-2026-85587 phpMyFAQ before 4.1.8 Incorrect Authorization via Admin Pages

phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content. Attackers with only add permissions can access news edit and FAQ translate endpoints to view unpublished content invisible to the public...

CVE-2026-85538

An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required permmodify or permmodifyorg permissions. The affected attribute deletion paths relied on organization membership checks performed by...

EUVD-2026-70958

An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required permmodify or permmodifyorg permissions. The affected attribute deletion paths relied on organization membership checks performed by...