CVE-2026-105126

LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their role to Superadmin or grant user.loginas permissions to take over accounts and...

derpyc0w

Descargo de responsabilidad No soy responsable de nada de lo que hagas con este código. Este código se proporciona sin garantía alguna. Descripción Exploit para CVE-2016-5195 que mapea un ejecutable SUID de solo lectura en memoria solo lectura y utiliza la condición de carrera para sobrescribirlo...

CVE-2024-11643

CVE-2024-11643 Accesibilidad por AllAccessible input type="hidden" name="action" value="AllAccessiblesav...

PT-2026-104598

Name of the Vulnerable Software and Affected Versions ezBookkeeping versions 1.2.0 through 2.0.0 Description A privilege escalation issue exists where attackers possessing an API token can obtain a full session token. This occurs because the TokenRefreshHandler function fails to verify the token...

CVE-2026-105131: Incorrect Authorization

ezBookkeeping 1.2.0 before 2.0.1 contains a privilege escalation vulnerability that allows attackers holding an API token to obtain a full session token via /api/v1/tokens/refresh.json. Because TokenRefreshHandler never checks token type, attackers can exchange short-lived or IP-restricted API...

PT-2026-104606

Name of the Vulnerable Software and Affected Versions Simple Shopping Cart WordPress plugin versions prior to 5.2.6 Description Stored Cross-Site Scripting XSS occurs because the plugin fails to escape certain settings field values before they are displayed on the admin settings page. This allows...

CVE-2026-105126: Improper Privilege Management

LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their role to Superadmin or grant user.loginas permissions to take over accounts and...

Rocky Linux 9 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_74424)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202674424 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer...

Debian dla-4818 : libxen-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4818 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4818-1 [email protected]...

Debian dla-4819 : libapache2-mod-php8.2 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4819 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4819-1 [email protected]...

Debian dsa-6542 : ruby-rack-session - security update

The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6542 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6542-1 [email protected] https://www.debian.org/security/ Moritz...

CVE-2026-105126 LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering

LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their role to Superadmin or grant user.loginas permissions to take over accounts and...

CVE-2026-105126 LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering

LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their role to Superadmin or grant user.loginas permissions to take over accounts and...

CVE-2026-105126 LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering

LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their role to Superadmin or grant user.loginas permissions to take over accounts and...

CVE-2026-105126

LaraDashboard versions before 1.4.8 are susceptible to a privilege escalation vulnerability due to improper privilege management. Authenticated users with role.edit permissions can tamper with roles by renaming them to Superadmin or granting user.login_as permissions. This allows an attacker to t...

xattr-oob-swap

xattr-oob-swap CVE-2020-27904: un bug de tfp0 para macOS 10.15.x y anteriores. Código de exploit de demostración para mi charla en BlackHat ASIA 2021. La vulnerabilidad se ha corregido en macOS Big Sur 11.0 y en la última actualización de seguridad de 10.15 y 10.14. Garantía Úsalo bajo tu propio...

VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC

VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC Este es mi malware. Utilizo el CVE 2023-38831, un tipo de exploit en WinRAR, para hacer este malware. También utilizo BypassUAC para obtener privilegios de Administrador. Este es el archivo OVA:...

CVE-2023-1829

CVE-2023-1829 La explotación se probó en el código fuente oficial de Ubuntu22.04 5.15.0-25.25 Instalando dependencias para algunas funciones de filtro netlink sudo apt install libnftnl-dev libmnl-dev Paso de compilación: make Referencias https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/m...

CVE-2025-29471

Stored XSS Vulnerability in Nagios Log Server Privilege Escalation to Admin ▶️ PoC Demo Date: 2025-04-02 Exploit Author: Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – Baron Samedit Desbordamiento de búfer basado en montículo en sudo | Análisis de explotación y mitigación Resumen CVE-2021-3156, conocido como Baron Samedit , es una vulnerabilidad de desbordamiento de búfer basado en montículo en el programa sudo. Permite que cualquier usuario loc...