73649 matches found
CVE-2025-27591
CVE-2025-27591 Below v0.9.0 PoC Privilege Escalation Exploit Disclaimer This exploit is intended for educational purposes only. It is designed to help users understand security vulnerabilities and improve their knowledge of cybersecurity. The author does not condone any illegal activities or...
-CVE-2021-4034
CVE-2021-4034 PwnKit Exploitation Report Official Security Assessment Summary Controlled exploitation evidence for CVE-2021-4034 with documented impact and remediation guidance. Report Metadata Field| Value ---|--- CVE ID| CVE-2021-4034 Vulnerability Name| PwnKit Affected Component| pkexec polkit...
CVE-2026-12269
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...
ROOT-APP-PYPI-CVE-2026-23949 CVE-2026-23949 in jaraco.context - Patched by Root
Root has patched CVE-2026-23949 in the jaraco.context package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-58PV-8J8X-9VJ2 GHSA-58pv-8j8x-9vj2 in jaraco.context - Patched by Root
Root has patched GHSA-58pv-8j8x-9vj2 in the jaraco.context package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-24049 CVE-2026-24049 in setuptools - Patched by Root
Root has patched CVE-2026-24049 in the setuptools package for Root:PyPI. Multiple fixed versions available...
Pyrescom-Termod-PoC
Pyrescom-Termod-PoC This is the Proof-of-concept exploit code for three vulnerabilities discovered by Jonas Mattsson and Hugo van den Toorn at Outpost24 Ghost Labs. These vulnerabilities are discovered in the web server component on a Pyrescom Termod4 time control machine. These vulnerabilities c...
EUVD-2026-88209
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...
ROOT-OS-DEBIAN-12-CVE-2026-66140 CVE-2026-66140 in exim4 - Patched by Root
Root has patched CVE-2026-66140 in the exim4 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-66141 CVE-2026-66141 in exim4 - Patched by Root
Root has patched CVE-2026-66141 in the exim4 package for Root:Debian:12. Multiple fixed versions available...
CVE-2021-27285
CVE-2021-27285 浪潮ClusterEngine集群管理平台是专为浪潮天梭系列HPC产品定制的一款作业管理软件。浪潮ClusterEngine存在suid配置不当的问题，导致非管理员用户可以通过部分组件进行提权获得root权限。 浪潮clusterenginev4.0存在组件“/opt/tsce4/torque6/bin/getJobsByShell”suid配置不当问题，非管理员用户能通过suid提权方式获得root权限。 提权过程如下： inspur@mu01 $ whoami inspur inspur@mu01 $...
CVE-2022-0486
Fidelis Network and Deception - CVE-2022-0486 - Insecure File Permissions Privilege Escalation - Multiple Releasability and Acknowledgements All exploits were approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approvin...
CVE-2026-75616
CVE-2026-75616 Authenticated OS command injection in the TP-Link Archer C20 v6 web management interface. BPA WAN configuration values are passed to system without adequate neutralization, allowing an authenticated administrator on the adjacent network to execute commands as root. Discovered and...
zero-click-exploit-analysis
Zero-Click, Old Tricks Anatomy of the 2025 WhatsApp/ImageIO zero-click exploit chain CVE-2025-55177 + CVE-2025-43300. Research paper plus an interactive web companion with CVE walkthroughs, patch diffs, and hands-on heap/stack labs. Live site: https://mcs.danielwagner.ro Paper PDF:...
CVE-2026-43499-A36
CVE-2026-43499-A36 Standalone, device-tested CVE-2026-43499 port for the Canadian Galaxy A36 5G SM-A366W on exact firmware A366WVLS3AYG1, including KernelSU late-load and Root My Galaxy integration. This repository contains the device-specific native side of Root My Galaxy: exact firmware profile...
ROOT-APP-NPM-CVE-2026-33896 CVE-2026-33896 in node-forge - Patched by Root
Root has patched CVE-2026-33896 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-33891 CVE-2026-33891 in node-forge - Patched by Root
Root has patched CVE-2026-33891 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-66031 CVE-2025-66031 in node-forge - Patched by Root
Root has patched CVE-2025-66031 in the node-forge package for Root:npm. Multiple fixed versions available...