PT-2026-110546

Name of the Vulnerable Software and Affected Versions Yungengxin Yun Jia Security Guard versions prior to 2.7.1.10 Description A flaw exists in the sub 14000885C function within the kgameprotect.sys library. A local attacker can manipulate the Pid argument to cause improper privilege management...

CVE-2026-105464: Improper Privilege Management

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-109631: Improper Neutralization of Special Elements used in an SQL Command

Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to...

CVE-2026-19622: Authentication Bypass Using an Alternate Path or Channel

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests...

CVE-2026-95837: Improper Privilege Management

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...

Rocky Linux 9.6 [TuxCare] Security Update: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791806541)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791806541 advisory. - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages...

TencentOS Server 4: linux-firmware (TSSA-2026:1080)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1080 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Important: webkitgtk4

Issue Overview: In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. CVE-2024-43091 In initializeSwizzl...

juicy-potato

Juicy Potato abusando de los privilegios dorados Una versión azucarada deRottenPotatoNG, con un poco de jugo, es decir, otra herramienta de Elevación de Privilegios Local, desde una Cuenta de Servicio de Windows a NT AUTHORITY\SYSTEM Resumen RottenPotatoNG y sus variantes aprovechan la cadena de...

needrestart-privesc-cve-2024-48990

needrestart Privilege Escalation CVE-2024-48990 This repository contains a minimal local privilege escalation exploit targeting a vulnerability in needrestart CVE-2024-48990. The vulnerability allows arbitrary Perl code execution as root by abusing the -c configuration option, which is parsed and...

rosenbridge

project:rosenbridge : puertas traseras de hardware en CPUs x86 github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Resumen project:rosenbridge revela una puerta trasera de hardware en algunos procesadores x86 de escritorio, portátiles y embebidos. La puerta trasera permite que el código...

linux-smart-enumeration

Primero, un par de oneliners útiles ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Ten en cuent...

cve_2026_31431

CVE-2026-31431 "Copy Fail" Kit de herramientas Detector y LPE de prueba de concepto para el error de escritura temporal en la caché de páginas de Linux algifaead / authencesn divulgado el 2026-04-29. Divulgación del informe: https://xint.io/blog/copy-fail-linux-distributions Autorización Úselo...

hackerbot

hackerbot Chatea con tu asistente y disfruta del hacking Este bot es una combinación de chatbot y herramientas de hacking Chat Análisis de cuentas de Twitter Escáner de URL Escáner de archivos Escáner de IP Enumeración de Linux Verificador de escalada de privilegios en Linux Shellshock Mimipengui...

dirty_sock

dirtysock: Escalada de Privilegios en Linux a través de snapd En enero de 2019, se descubrió que las versiones actuales de Ubuntu Linux eran vulnerables a la escalada de privilegios locales debido a un error en la API de snapd. Este repositorio contiene el POC original del exploit, que se pone a...

adaudit

adaudit Este script de PowerShell está diseñado para realizar una auditoría exhaustiva de Microsoft Active Directory, centrándose en la identificación de vulnerabilidades y debilidades de seguridad comunes. Su ejecución facilita la localización de áreas críticas que requieren refuerzo,...

CVE-2026-19576

The Goodix GT9xx input driver in drivers/input/inputgt911.c reads the touch point count from the controller's status register and masks it with GT911TOUCHPOINTSMSK 0x0F, yielding a value of 0..15. In gt911process that value is used directly as the loop bound for filling pointreg, a stack array...

pwncat

pwncat pwncat es una plataforma de post-explotación para objetivos Linux. Comenzó como un envoltorio alrededor de shells básicos bind y reverse y ha crecido desde entonces. Agiliza las operaciones comunes del equipo rojo mientras prepara código desde tu máquina atacante, no desde el objetivo...

CVE-2026-19576

The Goodix GT9xx input driver (specifically in drivers/input/input_gt911.c) contains a stack out-of-bounds write vulnerability. The driver reads a touch point count from the controller's status register and uses it directly as a loop bound for filling the point_reg[] stack array. Because the arra...

CVE-2026-19576 Stack out-of-bounds write in the Goodix GT911 touch controller driver from an unvalidated device-reported touch point count

The Goodix GT9xx input driver in drivers/input/inputgt911.c reads the touch point count from the controller's status register and masks it with GT911TOUCHPOINTSMSK 0x0F, yielding a value of 0..15. In gt911process that value is used directly as the loop bound for filling pointreg, a stack array...