CVE-2019-14287-demo

CVE-2019-14287 Demo Container This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. This container can be run with: docker run -ti cashwilliams/cve-2019-14287-demo Configuration...

CVE-2026-14459-14460-pardus-software

Pardus Software Center — Local Privilege Escalation CVE-2026-14459 & CVE-2026-14460 Proof-of-concept and exploit-ready code for two local privilege escalation issues in the pardus-software package Pardus Software Center version 1.0.4 , both fixed in 1.0.5. CVE| Class| Summary| CVSS 3.1 CERT-TR...

cve-2024-32019-PoC

CVE-2024-32019 — Escalada de privilegios local en ndsudo de Netdata Resumen El helper ndsudo de Netdata instalado con setuid root restringe qué comandos ejecutará, pero resuelve esos comandos usando elPATH del invocador. En las versiones afectadas, un usuario local puede colocar un binario...

Root-My-Galaxy-tests

Root My Galaxy Root My Galaxy es un instalador de un solo clic para compilaciones de firmware Samsung explícitamente compatibles. La aplicación en sí se mantiene separada de los offsets de dispositivo, los payloads de exploits nativos y los artefactos de compilación de KernelSU. Última versión El...

CVE-2026-94132

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

CVE-2025-65731

CVE-2025-65731 CWE-1191: Interfaz de depuración y prueba en chip con control de acceso inadecuado Acceso a shell raíz vía UART en D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Resumen Se ha identificado una vulnerabilidad de hardware crítica en el router D-Link DIR-605L, versión de hardware F1,...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 COMBINADO CON EL REPOSITORIO ORIGINAL: Encuéntralo aquí https://github.com/CamsShaft/IonStack-S22 Root completo en el dominio del kernel con selinux permisivo en mi SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. NOTAS: No voy a entrar en gran detalle ni...

CVE-2019-8627

CVE-2019-8627 a kernel information leak on macOS= 10.14.4 =============================== How to reproudce: 1. turn on firewall 2. run the proof of concept as root 3. disconnect Belkin USB-C LAN network and then connect the Belkin USB-C LAN network. after these operations you will get the leaked...

-Help-vivo-Y200i-5.10.218-GKI-CVE-2026-43499-stack-reclaim-reaches-0x300-need-0x318

-Help-vivo-Y200i-5.10.218-GKI-CVE-2026-43499-stack-reclaim-reaches-0x300-need-0x318 Device: vivo Y200i PD2354C, Snapdragon 4 Gen 2 SM4450, Android 14 / OriginOS 4 Kernel: 5.10.218-gki-g3a51ea9d5834 39-bit VA, 4K pages, KASLR on, STACKLEAK=y, no SVE Goal: temporary root via CVE-2026-43499 GhostLoc...

CVE-2022-0847-DirtyPipe-Exploit

CVE-2022-0847-DirtyPipe-Exploit What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of...

sudo_patch_CVE-2025-32463

sudopatchCVE-2025-32463 Mr.CIA's manual patching guide for CVE-2025-32463 Sudo local privilege escalation tested on Kali Linux and Ubuntu WSL. CVE-2025-32463 Sudo Patch Guide 🛡️ Eish, CVE-2025-32463 is a nasty local privilege escalation flaw CVSS 9.3 in Sudo 1.9.14–1.9.17, exploitable via the...

CVE-2026-100720

Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer the lowest-privileged authenticated role uploads an SSL certificate for one of their own domains, the Certificates API add/update methods parse it with opensslx509parse and store the issuer organization...

CVE-2026-100714

Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings hardened in GHSA-33mp, the field has no stringregexp or requiredotp guard, and its value is concatenated unescaped into the acme.sh command line built in...

CVE-2026-100713

Froxlor 2.3.10 and earlier contain a time-of-check time-of-use TOCTOU race condition in the SSH key synchronization cron lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFiles. The containment/symlink validation performed by FileDir::makeCorrectDir/makeCorrectFile is done only at check time;...

CVE-2026-100716

Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export DataDump cron fails to validate intermediate path components of the export destination: Froxlor\FileDir::makeCorrectDir contains an off-by-one in its path-component walk that skips the first segment...

CVE-2026-100715

Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task. Cron task 8 deleteFtpData, queued when an FTP account is deleted, calls FileDir::makeCorrectDir without the $fixedhomedir argument, so the symlink component walk is skipped, a...

CVE-2026-94132

The AcyMailing Enterprise extension for Joomla (versions 1.0.0 – 11.0.5 ) contains a Remote Code Execution (RCE) vulnerability. The root cause is that the mailbox actions in POP3 mode save incoming MIME attachments to the media/com_acym/upload/ directory without performing extension checks. This ...

CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

CVE-2023-34039

CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Static SSH key RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ Summary VMWa...

Poison-HTB-Report

Poison-HTB-Report Privilege Escalation on HTB "Poison" using PwnKit CVE-2021-4034 HTB "Poison" - Privilege Escalation Report BugVex This repository contains a full vulnerability report on the Hack The Box machine Poison. 🔍 Exploit Summary CVE: CVE-2021-4034 PwnKit Technique: Privilege escalation...