CVE-2022-27518_POC

CVE-2022-27518POC docker pull quay.io/citrix/citrix-k8s-cpx-ingress:13.0-58.30 Use the following command to verify if CPX image is installed in docker images docker images | grep 'citrix-k8s-cpx-ingress' Use the following command to create a CPX container instance running in bridge mode docker ru...

CVE-2026-104617

There are two invocations of qrencode to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system...

CVE-2026-104617

The sdbootutil utility contains a vulnerability where two invocations of qrencode to display QR codes leak sensitive private data, specifically the $pin and $key . This information is exposed via /proc//cmdline , making it accessible to arbitrary low-privileged users on the system. The vulnerabil...

printix-CVE-2022-29552

CVE-2022-29552 Simple Release | Print Friendly A "Incorrect Use of Privileged APIs" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability change any values within the...

Shwmae

Shwmae Shwmae shuh-my is a Windows Hello abuse tool that was released during DEF CON 32 as part of the Abusing Windows Hello Without a Severed Hand talk. The purpose of the tool is to abuse Windows Hello from a privileged user context. Shwmae Copyright C 2024 Shwmae enum Default Verb Enumerate...

CVE-2026-76668

A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data...

CVE-2024-22120-RCE-with-gopher

Usage python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Example Scenario You have identified a Zabbix server running on IP 192.168.1.100, and you have access to a low-privileged user with the following details: Session ID sid: d82bf6715e1d3c1f25 Host ID hostid: 10107 PHP...

CVE-2026-76668 HPE NonStop Kernel - Access to unmapped or privileged data

A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data...

CVE-2026-76668

A security vulnerability exists in HPE NonStop Kernel (CWE-1260) which may allow user space access to privileged or unmapped data . Affected components include various software such as NONSTOP KERNEL T9050 , EXPAND T9057 , and XDR Streams T0248 , among many others listed in document HPESBNS05148....

printix-CVE-2022-25089

CVE-2022-25089 A system admin's complete nightmare, users changing the registry from anywhere and everywhere without authentication. Explore the docs » View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap...

CVE-2026-110929

A flaw was found in OpenSSH. On platforms that cannot pass file descriptors and that need root to allocate a terminal, the post-authentication session process keeps root privilege. An authenticated user can then perform actions as root, including privileged socket connections and binding forwards...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...

CVE-2026-61844 FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise flattens logical folder paths into metadata filenames by replacing separators and spaces with hyphens, so distinct folders such as team/docs and team-docs can share on...

CVE-2026-82153

The Dell OS Recovery Tool (versions prior to 2.4.4 ) is affected by an Insecure Storage of Sensitive Information vulnerability (CWE-922). A low privileged attacker with physical access could exploit this flaw to cause Information Disclosure . Remediation is available via security update DSA-2026-...

CVE-2026-82153

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure...

EUVD-2026-101145

Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfishcertificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading...

CVE-2025-9074

CVE-2025-9074: Docker Engine API Unauthenticated RCE Severity : CRITICAL | CVSS Score : 9.8 estimated | Affected Versions : Docker Desktop 4.44.3 A proof-of-concept exploit for CVE-2025-9074, an unauthenticated Remote Code Execution vulnerability in Docker Engine API that allows privileged...

CVE-2026-101217

Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-101029

Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...