CVE-2025-4632_POC

Samsung MagicINFO 9 Server Exploit CVE-2025-4632 This repository contains a Python replication script for CVE-2025-4632, an Unauthenticated Remote Code Execution RCE vulnerability in Samsung MagicINFO 9 Server versions prior to 21.1052. The vulnerability exists due to an improper limitation of a...

CVE-2026-107510

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation...

VulnHub-DC1-Writeup

VulnHub-DC1-Writeup "Penetration testing lab writeups documenting full attack chains — from recon to root." 🔓 VulnHub — DC-1 Boot-to-Root Writeup Difficulty: Beginner–Intermediate Platform: VulnHub Goal: Capture all 4 flags and achieve full root-level compromise Attacker OS: Kali Linux VirtualBox...

CVE-2026-45258_1day_LPE_exploit

This repository does not have a README...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Description This demonstration took place at HITCON 2023 in Taiwan. The demo highlights the exploitation of AMDCpuProfiler.sys within AMD μProf. By triggering an arbitrary write on the EPROCESS token, privilege escalation to SYSTEM level is achieved. Disabling the...

CVE-2026-93521

A flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR Resize and Rotate extension provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update request...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...

CVE-2026-107510 Authenticated argument injection in NIOS command line leading to privilege escalation

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation...

CVE-2026-107510

An authenticated high privilege user can perform argument injection within troubleshooting commands in NIOS , leading to privilege escalation . The vulnerability allows for an increase in permissions, potentially granting higher-level access to the system. No specific exploit links or remediation...

CVE-2026-107510 Authenticated argument injection in NIOS command line leading to privilege escalation

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation...

EUVD-2026-94824

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder = 5.1.2 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Divi Form Builder versions = 5.1.2 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated...

CVE-2021-36934-HiveNightmare-Lab

CVE-2021-36934 HiveNightmare - Educational Lab 🎯 Objective Reproduce and analyze the HiveNightmare vulnerability in a controlled lab environment. 📋 Table of Contents Vulnerability Description Implementation Demonstration Lab Setup & Tools Exploitation Steps Mitigation Measures Demonstration...

gvcidrv64

hi hackers. GVCIDrv64.sys is the signed kernel driver that ships with Gigabyte's BIOS utility. It creates \.\GVCIDrv64 with no security descriptor, so any local user can open it no admin, no UAC. It exposes 3 IOCTLs with zero access control: map 32 MB of physical memory 0x9C406580, unmap...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation

A flaw was found in the Linux kernel's Server Message Block SMB client. A double-free vulnerability exists in the SMB2ioctl replay path, where a response buffer can be freed twice under specific error conditions. A malicious or compromised SMB server could exploit this by sending crafted response...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...

SUSE-SU-2026:4585-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8...

CVE-2024-30090

CVE-2024-30090 - LPE PoC CVE-2024-30090 found by Angelboy with DEVCORE. Parent.cpp Get the ntoskrnl base by using NtQuerySystemInformation medium-integrity - Compile as x64. Child.cpp The exploit for CVE-2024-30090 - Compile as x86. Thanks Big thanks Angelboy for your help and guidance!. Cedric...

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation Automatically exploit systems with vulnerable davfs2 CVE-2013-4362 WHAT IS THIS FOR? Just two .sh scripts to simplify the exploitation davfs2 with vulnerable versions Prerequisites At least one of the module 'fuse' or 'coda' must not be load...