CVE-2026-84436 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges...

CVE-2026-84440 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

EUVD-2026-89192

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

CVE-2026-84440

IBM Guardium Data Protection 12.2 is vulnerable to command injection within its SNMP alert notification functionality. An authenticated attacker capable of influencing policy alert text can cause the SNMP alerter service to execute attacker-controlled data as operating system commands. Because th...

CVE-2022-1388

CVE-2022-1388 A remote code execution vulnerability exists in the iControl REST API feature of F5's BIG-IP product. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges. USAGE python3 f5bigipscanner.py...

owt

目前不稳定，最终会更新。 进攻性WiFi工具包（owt）由Brennan Mccown（clu3bot）创建 该工具将WiFi审计所需的一些必要工具整合到一个Unix Bash脚本中，并带有用户友好的界面。owt的目标是在保持最大效率的同时，尽可能减小文件体积。 安装与运行脚本 $ git clone https://github.com/clu3bot/OWT.git $ cd owt $ sudo bash owt.sh 注意：owt需要root权限 请确保定期允许更新 使用说明 owt的详细使用方法可在此处找到 使用说明 故障排除...

CVE-2015-1318

CVE-2015-1318 Exploit I used to claim 10% final-grade extra credit in Matthew Might's Compilers class. https://bugs.launchpad.net/apport/+bug/1438758 Bonus opportunities http://matt.might.net/teaching/compilers/spring-2015/ Use an exploit on vulcan to gain root access: +10% for a local user...

cve-2019-2215_SH-M08

2019年10月之前的安全补丁的Android终端上获取root权限的概念证明代码的AQUOS sense 2（SH-M08）移植版。 运行环境 已验证以下OS版本可以运行。在其它版本或其它机型上运行时，请按照“移植方法”章节进行移植。 ro.build.date: 2019年 3月 20日 水曜日 04:58:03 JST ro.build.description: Anasui-user 8.1.0 S3200 01.00.02 release-keys ro.build.display.id:...

iovy_root_research

Inspirado por dosomder/iovyroot https://github.com/dosomder/iovyroot Una herramienta root basada en la vulnerabilidad CVE-2015-1805 Es compatible con 32 y 64 bits, obtiene la dirección de la tabla de llamadas al sistema mediante swi. Referencia a Obteniendo syscalltable en Android...

Silent-Call

Silent;Call Root remoto sin autenticación previa en Cisco Unified Communications Manager 15.x Tres solicitudes HTTP. Cero credenciales. Acceso root. Cada llamada ahora es tuya. Kill Chain Paso| Componente| Descripción ---|---|--- 1| Spoofhack| La suplantación de la cabecera X-Forwarded-For elude ...

CVE-2025-32463

CVE-2025-32463 Detection Framework A comprehensive security monitoring and detection framework designed to identify exploitation attempts targeting the sudo chroot privilege escalation vulnerability CVE-2025-32463. This project demonstrates advanced threat detection methodologies, incident respon...

CVE-2023-22809

CVE-2023-22809 CVE-2023-22809 is a critical vulnerability that affects the popular sudo software, specifically the sudoedit command. This vulnerability allows an attacker to gain root privileges on a targeted system by exploiting a flaw present in the sudoedit command. Exploiting the CVE-2023-228...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...

CopyFail-CVE-2026-31431

CopyFail: CVE-2026-31431 Python implementation of copy.fail. Overwrites the page cache of a setuid-root binary via AFALG + splice to get root. No race, no offsets works on any Linux distro since 2017. Requirements Python 3.6+ 3.12+ uses os.splice natively; older versions fall back to ctypes Linux...

CVE-2025-32463

CVE-2025-32463 Exploit Overview This repository provides a Go-based exploit tool for CVE-2025-32463 , a critical local privilege escalation vulnerability CVSS 9.3 in sudo versions 1.9.14 to 1.9.17. It allows unauthorized local users to gain root access by exploiting a flaw in the --chroot -R...

ROOT-APP-NPM-GHSA-2X7J-588G-CCC2 GHSA-2x7j-588g-ccc2 in nodemailer - Patched by Root

Root has patched GHSA-2x7j-588g-ccc2 in the nodemailer package for Root:npm. Multiple fixed versions available...

CVE-2019-14287-write-up

CVE-2019-14287-write-up 4294967295 Sudo Bug Allows Restricted Users to Run Commands as Root DEMONSTRATION OF VULNERABILITY Add a new user: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // add password to user visudo Add a new entry test ALL=ALL, !root /usr/bin/id // specifying...

CVE-2022-20818

CVE-2022-20818: Escalada de privilegios local mediante lectura parcial de archivos en Cisco SD-WAN La función “config - load” del shell SSH de Viptela utiliza “wget” para obtener archivos “command” remotos a través de FTP. Al alojar un servidor FTP malicioso y reemplazar los archivos locales...

CVE-2024-48990-PoC

PoC for CVE-2024-48990 in needrestart educational purposes only https://www.qualys.com/2024/11/19/needrestart/needrestart.txt How to run? Running ./start.sh will compile the fake importlib library and start a script that waits for needrestart to be executed by root. It will pop a shell afterwards...

dirtyPipe-automaticRoot

Dirty Pipe automatic root exploit CVE-2022-0847 Dependencies: Python 3.10 or above How to use: Automatic root: $ python3.10 dirtyPipe.py -a + hjacking super user in /etc/passwd + dropipng shell Write a no write permission, immutable or read-only mounted file: $ python3.10 dirtyPipe.py -w FILE...