parallels-file-move-privesc

parallels-file-move-privesc 此仓库包含一个针对CVE-2023-50226 / ZDI-CAN-21227的利用程序，可用于在18.3.2之前的Parallels Desktop版本上将权限提升至root。...

YAPS

YAPS - Y et A nother P HP S hell また別のPHPシェル はい、名前が示す通り、これはまた別のPHPリバースシェルで、世の中に数百あるものの一つですが、いくつかの利点があります。すべての機能を含む単一のPHPファイルであり、シンプルなTCPリスナー（例：nc -lp 1337）で制御できます。 現在のバージョン（1.5）では、主要機能はLinuxシステムのみをサポートしていますが、今後Windowsでも動作するように計画しています。 現在は最初のバージョンであり、まだ十分にテストされていません。...

CVE-2026-53694-NoMachine-LPE

CVE-2026-53694：通过参数注入实现 NoMachine 本地权限提升 概述 本仓库包含 CVE-2026-53694（NoMachine for Linux 中的本地权限提升漏洞）的分析报告和概念验证（PoC）代码。 由于 nxchmod.sh 脚本未能正确过滤参数定界符，本地非特权用户可以向以 root 身份执行的系统命令中注入参数。通过将参数注入与符号链接相结合，攻击者可以覆盖关键系统文件（例如 /etc/passwd），并将权限提升至 root。 该漏洞已由厂商完全修复。 发现过程 发现此漏洞的过程充满了尝试、错误和一个深夜的顿悟。以下是发现过程的经过： 1. 观察目标...

CVE-2013-2094

CVE-2013-2094 Linux 2.6.32/2.6.37 - 3.8.10 PERFEVENTS 本地提权 x86/x8664 无反向连接...

EPScalate

EPScalate QuickHealのSeqrite Enterprise Endpoint Security Solution EPSにおける特権昇格の脆弱性。この脆弱性にはCVE-2023-31497が割り当てられています。 https://user-images.githubusercontent.com/39941993/230790056-87157751-b96c-49a6-81df-bf3126acfbd6.mp4 ベンダーと製品詳細 ベンダー : Quick Heal Technologies Limited 製品 : Seqrite Endpoint Security...

pentesting-obioba

pentesting-obioba Pentesting caja negra: Shellshock CVE-2014-6271 + Log4Shell CVE-2021-44228. Escalada a root. Informe ejecutivo y técnico Pentesting Obioba — Seguridad Audit Black Box Proyecto del Bootcamp 360° en Ciberseguridad de The Bridge Digital Talent Accelerator 2025-2026. 🎯 Objetivo...

CVE-2026-63343 Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a metadata.yaml symlink pointing to an arbitrary host path allows an authenticated Incus user to read or overwrite any file on the host as root via the instance metadata API. The...

CVE-2026-20200

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...

CVE-2026-67599

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can...

CVE-2026-67599 ClearOS 7.9 OS Command Injection via Log Viewer filter parameter

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can...

EUVD-2026-52409

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can...

CVE-2026-67599

Summary of technical details (CVE-2026-67599, ClearOS 7.9) : An OS command injection vulnerability exists in the Log Viewer endpoint used by the webconfig user. The vulnerability stems from the filter parameter being unsafely interpolated into a shell command in File.php, allowing command substit...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 vivo PD2425 Exploit Adaptation Project A porti...

CVE-2026-16526

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

CVE-2026-16526

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root. Mitigation To mitigate this vulnerability, ensure that the linuxsockets PMDA is not configured to...

CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

CVE-2026-43698

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to gain root privileges...

CVE-2026-59689

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system...

CVE-2026-59689 Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system...

EUVD-2026-49187

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system...