wp2shell-cve-2026-63030-root-cause

wp2shell CVE-2026-63030 + CVE-2026-60137: Analisi Indipendente della Causa Principale WordPress core ha divulgato wp2shell il 2026-07-17 come una RCE critica e non autenticata che colpisce installazioni predefinite WordPress 6.9.0-6.9.4, 7.0.0-7.0.1, zero plugin richiesti. Lo scopritore originale...

CVE-2023-2640-32629

Ubuntu Privilege Escalation: CVE-2023-2640 e CVE-2023-32629 Questa è una vulnerabilità di escalation dei privilegi locali che interessa alcuni kernel Ubuntu. Consente a utenti non privilegiati di impostare attributi estesi privilegiati su file montati, aggirando i controlli di sicurezza e...

CVE-2025-32463-EXPLOIT

Xpl0it — Sudo NSS Library Hijack | v0.0.4 Autor: 0xb0rn3 | 0xbv1 Typ: Proof of Concept PoC Sicherheitsforschungswerkzeug CVE: CVE-2023-42456 Technik: sudo -R chroot NSS-Bibliotheksinjektion → Privilegieneskalation zu root ⚠️ Haftungsausschluss Dieses Tool ist nur für autorisierte Penetrationstests...

cve-2018-17182

define GNUSOURCE include include include include include include include include include include include int vmaspamcontrolfd = -1; int threaddonefd = -1; int vmaspamdonefd = -1; void semincint fd uint64t val = 1; if writefd, &val, 8 != 8 err1, "seminc"; void semdecint fd uint64t val; if readfd,...

PHP-CVE-2023-2023-2640-POC-Escalation

Ich bin nicht verantwortlich, wenn du den Code unsachgemäß oder illegal verwendest. Der Zweck des Skripts ist rein edukativ und nichts weiter. PHP-CVE-2023-2023-2640-POC-Escalation In diesem Skript in PHP habe ich versucht, einen Exploit zu erstellen von --cve-2023-2640--privilege-escalation...

dirtyfrag

Dirty Frag: LPE Linux universale Sommario Questo documento descrive la classe di vulnerabilità Dirty Frag, scoperta e segnalata per la prima volta da Hyunwoo Kim @v4bel, che può ottenere privilegi di root sulle principali distribuzioni Linux combinando la vulnerabilità xfrm-ESP Page-Cache Write...

ghostlock-cve-2026-43499

CVE-2026-43499 GhostLock — ARM32 Kernel Privilege Escalation Research Linux kernel futex PI rtmutex Use-After-Free vulnerability research and exploit development targeting Huawei Watch 4 Pro MDS-AL00 , Snapdragon SW5100, armv7l, kernel 5.4.210. Vulnerability removewaiter in kernel/locking/rtmutex...

CVE-2026-3584

CVE-2026-3584 – WordPress Kali Forms = 2.4.9 - Esecuzione Remota di Codice Non Autenticato via formprocess 🔥 Riepilogo della Vulnerabilità Il plugin WordPress Kali Forms versioni = 2.4.9 presenta una vulnerabilità critica di esecuzione remota di codice non autenticato RCE. Questa falla...

GhostLock-OPPO-PCKM00

GhostLock — PoC para OPPO PCKM00 4.14.180 CVE-2026-43499 GhostLock — escalada local de privilégios por use-after-free na herança de prioridade do futex do kernel Linux, portada para o OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. AVISO / 免责声明 Este projeto destina-se exclusivament...

CVE-2025-4138

CVE-2025-4138 Python-Tarfile-Modul Verzeichnis-Traversal-Schwachstelle mit Overflow über Verzeichnisgrenzen hinweg Auswirkung : Privilegienerweiterung Funktionsweise : Die TarFile.extractall- und TarFile.extract-Methoden von Python unterstützen ein Feature, mit dem ein Filter gesetzt werden kann,...

CVE-2024-26229-BOF

CVE-2024-26229 BOF Implementazione Beacon Object File di CVE-2024-26229 — escalation dei privilegi locali del driver CSC di Windows tramite furto del token DKOM. Basato su RalfHacker/CVE-2024-26229-exploit, convertito in BOF con Dynamic Function Resolution DFR per l'uso con framework C2 che...

CVE-2020-13654

CVE-2020-13654 - XWiki Platform Scoperto e segnalato da: Astaruf Analisi completa: https://nstsec.com/en/posts/xwiki-xss-cve-2020-13654/ Voce NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-13654 Vulnerabilità XWiki Platform prima della versione 12.8 non applica la codifica HTML ai campi controlla...

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below: escalation locale dei privilegi tramite symlink Panoramica Campo| Dettagli ---|--- CVE| CVE-2025-27591 Software| Meta below monitor delle risorse di sistema Versioni interessate| 0.9.0 Vulnerabilità| Follow di symlink → sovrascrittura arbitraria di file come root...

EUVD-2026-67958

IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from...

EUVD-2026-67948

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability...

EUVD-2026-67950

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert ARE for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticate...

Debian dla-4759 : xrdp - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4759 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4759-1 [email protected]...

PT-2026-83497

The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg select user role value from the unauthenticated WooCommerce Store API...

CVE-2024-28000

CVE-2024-28000 - LiteSpeed Cache Privilege Escalation PoC !WARNING This repository is intended for educational and research purposes only. Use the provided PoC exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this...

amd-ryzen-master-driver-v17-exploit

Cobalt Strike Beacon Object File zur Kernel-Ausnutzung mit AMDs Ryzen-Master-Treiber Version 17. Erstellt von Tijme. Dank an Alex, der es mir beigebracht hat! Ermöglicht durch Northwave Security Beschreibung Dies ist eine Cobalt Strike CS Beacon Object File BOF und ein ausführbares Programm, die...