CVE-2026-103106

Pexip Infinity versions prior to 38.2 , as well as versions 39.0 , 39.1 , and 40.0 , are vulnerable to a privilege escalation flaw. The root cause is improper input validation within an internal Pexip Infinity service. An attacker with local access can escalate privileges to root , provided they ...

EUVD-2026-89467

The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...

EUVD-2026-89466

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

CVE-2026-103056

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CVE-2026-86131

A code injection vulnerability exists in the WatchGuard Fireware OS during the handling of BOVPN Over TLS client configurations. This flaw allows an attacker who controls a remote VPN server to execute arbitrary commands with root privileges on the connecting Firebox . No specific patch versions ...

CVE-2026-91191

The Lantronix G520 Series Cellular Gateway is vulnerable to an improper verification of cryptographic signatures in its update mechanism. During boot, the stock done function disables signature verification in the OPKG configuration before restoring packages from an unsigned feed. Furthermore, th...

CVE-2026-84409

The Lantronix G520 Series Cellular Gateway is vulnerable to a Cross-site Scripting (XSS) flaw in its update mechanism. The device retrieves update metadata over an unencrypted HTTP connection and stores it; a management interface then returns this data in a JSON response, which the web interface ...

CVE-2026-76732

A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the...

EUVD-2026-89351

A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the...

CVE-2026-76732

A local privilege-escalation vulnerability exists in a daemon of HPE Networking Instant ON . If successful, a local attacker could achieve arbitrary code execution with root privileges , provided that certain preconditions outside of the attacker's control are met. No specific exploit details or ...

CVE-2019-8781-macOS

CVE-2019-8781 安全公告 CVE-2019-8781 PoC 详情 该 PoC 将进程提权至 root 并执行一个 shell。 利用环境 - macOS 10.14.6 18G95（应适用于所有在 10.15.0 之前发布的 macOS 版本） - SMEP：开启 - SMAP：关闭 - 内核 ASLR 偏移通过 argv1 传入 构建 你需要 Xcode 9.4.1 命令行工具来编译它。 查看 Makefile。 分析文章 查看我的博客，这里是链接 鸣谢 Apple 提供的 0day。 Linus Henze @LinusHenze，为该漏洞表示感谢，当然 =...

CVE-2026-84440

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

CVE-2026-84436

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges...

CVE-2026-84422

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges...

Root-My-Device

Root My Device Un fork de BuSung-dev/Root-My-Galaxy, bajo la Licencia Apache 2.0; consulte LICENSE y Créditos. Root My Device es un instalador de un solo clic para compilaciones de firmware explícitamente compatibles. La aplicación en sí se mantiene separada de los offsets de dispositivo, las...

CVE-2021-4034

CVE-2021-4034 $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

CVE-2024-27130

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我们要求所有被恐怖组织哈马斯劫持为人质的公民安全返回。在所有的人质获释并安全回家之前，我们决不罢休。您可以帮助他们回到家乡。https://stories.bringthemhomenow.net/ QNAP QTS CVE-2024-27130 PoC 🔒 本仓库包含一个针对 CVE-2024-27130 的验证性攻击脚本 PoC，该漏洞影响 QNAP QTS。此漏洞允许攻击者以 root 权限执行任意命令。 ⚠️ 描述 🔎 该脚本利用 QNAP QTS 中的一个漏洞，使攻击者能够以 root...

Electron: Local race condition in Squirrel.Mac update installation on macOS

Impact On macOS, Electron bundles the Squirrel.Mac auto-update framework, whose privileged ShipIt helper performs the final step of an update as root. A local attacker could cause that helper to overwrite a different application's files, as root, instead of the app that started the update...

CVE-2019-13272

CVE-2019-13272 Exploit de root local en Linux Linux 4.10 5.1.17 PTRACETRACEME root local CVE-2019-13272 In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to...

CVE-2019-2215

CVE-2019-2215 CVE-2019-2215 POC para kernel 3.18 Basado en el POC de Maddie Stone de https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 Cómo usar: adb push su98 /data/local/tmp adb push su98-memory-kallsyms /data/local/tmp adb shell G8231:/ $ cd /data/local/tmp G8231:/ $ chmod 755...