HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Description This demonstration took place at HITCON 2023 in Taiwan. The demo highlights the exploitation of AMDCpuProfiler.sys within AMD μProf. By triggering an arbitrary write on the EPROCESS token, privilege escalation to SYSTEM level is achieved. Disabling the...

CVE-2026-93521

A flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR Resize and Rotate extension provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update request...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...

CVE-2026-107510 Authenticated argument injection in NIOS command line leading to privilege escalation

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation...

CVE-2026-107510 Authenticated argument injection in NIOS command line leading to privilege escalation

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation...

EUVD-2026-94824

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation...

CVE-2026-107510

An authenticated high privilege user can perform argument injection within troubleshooting commands in NIOS , leading to privilege escalation . The vulnerability allows for an increase in permissions, potentially granting higher-level access to the system. No specific exploit links or remediation...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder = 5.1.2 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Divi Form Builder versions = 5.1.2 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated...

CVE-2021-36934-HiveNightmare-Lab

CVE-2021-36934 HiveNightmare - Educational Lab 🎯 Objective Reproduce and analyze the HiveNightmare vulnerability in a controlled lab environment. 📋 Table of Contents Vulnerability Description Implementation Demonstration Lab Setup & Tools Exploitation Steps Mitigation Measures Demonstration...

gvcidrv64

hi hackers. GVCIDrv64.sys is the signed kernel driver that ships with Gigabyte's BIOS utility. It creates \.\GVCIDrv64 with no security descriptor, so any local user can open it no admin, no UAC. It exposes 3 IOCTLs with zero access control: map 32 MB of physical memory 0x9C406580, unmap...

kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation

A flaw was found in the Linux kernel's Server Message Block SMB client. A double-free vulnerability exists in the SMB2ioctl replay path, where a response buffer can be freed twice under specific error conditions. A malicious or compromised SMB server could exploit this by sending crafted response...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...

SUSE-SU-2026:4585-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8...

CVE-2024-30090

CVE-2024-30090 - LPE PoC CVE-2024-30090 found by Angelboy with DEVCORE. Parent.cpp Get the ntoskrnl base by using NtQuerySystemInformation medium-integrity - Compile as x64. Child.cpp The exploit for CVE-2024-30090 - Compile as x86. Thanks Big thanks Angelboy for your help and guidance!. Cedric...

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation Automatically exploit systems with vulnerable davfs2 CVE-2013-4362 WHAT IS THIS FOR? Just two .sh scripts to simplify the exploitation davfs2 with vulnerable versions Prerequisites At least one of the module 'fuse' or 'coda' must not be load...

firefox: Privilege escalation due to invalid pointer in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...

firefox: thunderbird: Privilege escalation in the DOM: Workers component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Workers component...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2021-3560_Polkit

CVE-2021-3560 Polkit Local Privilege Escalation .--. .-" "-. .--. / .. / .-. .-. / .. \ | | '| / Y \ |' | | | \ \ \ 0 | 0 / / / | \ '- ,.-" "-./, -' / '-' / ^ ^ \ '-' .--'| . ./ |'--. / \ \ / / \ / '. '---' .' \ / '---' \ / \ An automated exploit for the CVE-2021-3560 vulnerability affecting...