Vulnerability-DLink-CVE-2025-14659

CVE-2025-14659: Анализ внедрения команд в DHCP-демон D-Link Recreate CVE Project | Offensive Security Автор: Peter Lin Дата: Май 2026 Описание проекта: CVE-2025-14659 сообщает об уязвимости внедрения команд в компоненте DHCP-демона, присутствующем в беспроводном маршрутизаторе D-Link DIR-860LB1 с...

vsftpd2.3.4PyExploit

vsftpd2.3.4PyExploit Un exploit pour obtenir root sur vsftpd 2.3.4 CVE-2011-2523 écrit en python Utilisation : ./exploit.py $VictimIPaddress Attention ! L'exploit ouvre un shell qui n'est pas reverse. Je recommande d'ouvrir un reverse shell après l'exploit. Je ne l'ai pas fait ici car je ne voula...

gameoverlay

Gameoverlay code shell pour élévation de privilèges root sur UBUNTU. Ubuntu : 23.04 22.10 22.04 pas v5.15.0 20.04 v.5.4.0 pour 32629 18.04 v.5.4.0 pour 32629 exécuter avec ./overlay.sh...

CVE-2021-3560

Уязвимость Polkit - CVE-2021-3560 📕 Введение В 2021 году исследователь Кевин Бэкхаус обнаружил уязвимость повышения привилегий в утилите polkit. однако не все версии Linux уязвимы для polkit. Ниже приведен пример уязвимой версии; Red Hat Enterprise Linux 8 Fedora 21 или новее Debian Testing...

SUDO-privilege-escalation

Повышение привилегий SUDO Обзор: Этот проект демонстрирует эксплуатацию уязвимости повышения привилегий Sudo CVE-2023-22809. Цель — смоделировать, как атакующий может получить несанкционированный root-доступ, эксплуатируя эту уязвимость в контролируемой среде. Используемые технологии: Операционны...

DeepRoot

CVE-2021-3493 Comprehensive Exploit Framework $\colorFF4D2E \textbf\textsfDeepRoot$ OverlayFS Capability Privilege Escalation Framework - Red Team Professional Edition Aperçu DeepRoot framework est un exploit d'élévation de privilèges complet pour CVE-2021-3493 OverlayFS Privilege Escalation avec...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through a race condition in the SshKeys::generateFiles process. An attacker can gain unauthorized root access by atomically replacing...

CVE-2026-100682 Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extracts user-supplied ZIP archives without proper symlink validation. Attackers with BUILDER role can craft a malicious ZIP with leaf symlink entries followed by duplicate file entri...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock CVE-2026-43499 — ASUS Zenfone 9 exploit + KernelSU...

metasploitable2-vsftpd-exploit

Metasploitable2 – vsftpd 2.3.4 Backdoor Exploitation Overv...

OESA-2026-4085 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. Th...

OESA-2026-4084 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. Th...

CVE-2026-79959

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...

CVE-2026-79959

The Botslab G980H dash camera firmware is vulnerable to use of hard-coded credentials because it contains a root account password that cannot be modified by the user. An attacker with physical access to the device or the ability to obtain the firmware can recover these credentials to gain root ac...

EUVD-2026-86464

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...

CVE-2026-79959 Botslab G980H Dashcams Use of Hard-coded Credentials

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...

CVE-2026-79959 Botslab G980H Dashcams Use of Hard-coded Credentials

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...

CVE-2026-93425 Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the patch.readRepoDirectories tRPC procedure passes the user-controlled repoPath value from apps/dokploy/server/api/routers/patch.ts into a shell command in packages/server/src/services/patch-repo.ts without safe...

CVE-2026-19492

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

CVE-2026-19492 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...