EUVD-2026-90081

All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root...

CVE-2026-102490 Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha

All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root...

CVE-2026-102490

All versions of Zammad , including the latest alpha, are affected by a local privilege escalation (LPE) vulnerability. This flaw allows a local zammad user to escalate their privileges to root . Specific details regarding the underlying root cause, affected components, or available remediation ar...

TelnetdBypass-

TelnetdBypass — CVE-2026-24061 Scanner A Python-based security scanner that detects and exploits CVE-2026-24061 , a critical CVSS 9.8 authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. How it Works The scanner injects a malicious USER=-f root value via the...

PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

jailbreak-iOS12

Jailbreak for iOS 12 iOS 12.0 & 12.1.2 Jailbreak with CVE-2019-6225 An incomplete iOS 12 Jailbreak. For now it only runs the exploit, gets tfp0, gets ROOT, escapes the SandBox, writes a test file to prove the sandbox was escaped then resprings. Feel free to build on top of it as long as you respe...

CVE-2024-37081

CVE-2024-37081: Múltiples escaladas de privilegios locales en VMware vCenter Server El servidor vCenter contiene múltiples vulnerabilidades de escalada de privilegios locales debidas a una mala configuración de sudo. Un usuario local autenticado con privilegios no administrativos podría explotar...

ROOT-APP-MAVEN-CVE-2026-34481 CVE-2026-34481 in org.apache.logging.log4j:log4j-layout-template-json - Patched by Root

Root has patched CVE-2026-34481 in the org.apache.logging.log4j:log4j-layout-template-json package for Root:Maven. Multiple fixed versions available...

CVE-2021-3156

Baron Samedit - Sudo CVE 2021-3156 PoC Written in BASH and C. Written by: TheFlash2k/Ali Taqi Wajid Usage: This would spawn a root shell directly if the sudo is vulnerable. $ make $ ./exploit...

ROOT-APP-NUGET-CVE-2025-55247 CVE-2025-55247 in Microsoft.Build.Tasks.Core - Patched by Root

Root has patched CVE-2025-55247 in the Microsoft.Build.Tasks.Core package for Root:NuGet. Multiple fixed versions available...

CVE-2024-57376

CVE-2024-57376 Exploit de ejecución remota de código sin autenticación para D-Link DSR-250 y DSR-250N Aviso de seguridad: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Uso $ python3 exploit.py usage: Ejemplo $ python3 exploit.py 192.168.1.1 443 id + fingerprint...

CVE-2022-20186

Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

ROOT-APP-MAVEN-CVE-2025-67030 CVE-2025-67030 in org.codehaus.plexus:plexus-utils - Patched by Root

Root has patched CVE-2025-67030 in the org.codehaus.plexus:plexus-utils package for Root:Maven. Multiple fixed versions available...

DirtyFrag-Galaxy

DirtyFrag-Galaxy 한국어 · English One-click temporary KernelSU root late-load for Samsung Galaxy devices via the DirtyFrag CVE-2026-43284 exploit. No Shizuku, no PC, no ADB — the app performs everything from the exploit to KernelSU late-load by itself. Download latest APK ⚠️ WARNING I am not...

ROOT-APP-MAVEN-CVE-2016-1000027 CVE-2016-1000027 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2016-1000027 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

Exploit for Out-of-bounds Write in Tp-Link Omada_Sg2005P-Pd_Firmware

Proof-of-concept exploit for CVE-2026-1668 This is a proof-of...

CVE-2026-54161

CVE-2026-54161 PoC Resumen upsmon interpola el valor proporcionado por el servidor, controlable por el atacante,ups.alarm, sin sanitizar, en un comando de shell que ejecuta mediante system. Cuando un dispositivo monitoreado reporta un estado ALARM y el operador ha configurado NOTIFYCMD con EXEC e...

lenovo_y700_tb320fc_on_CVE-2025-21479

TB320FC Kernel Root — CVE-2025-21479 English | 简体中文 In-memory kernel privilege escalation for the Lenovo Legion Y700 2023 TB320FC , exploiting CVE-2025-21479 Qualcomm Adreno GPU SMMU vulnerability, with full root management provided by ReSukiSU. No bootloader unlock. No flashing. No PC required f...

CVE_2022_46395_Gazelle

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

meizu21-ghostlock-root

MEIZU 21 GhostLock Root Root en tiempo de ejecución para el MEIZU 21 con bootloader bloqueado, basado en GhostLock / CVE-2026-43499. Este repositorio contiene únicamente los offsets específicos del dispositivo, el payload ARM64 precompilado y los scripts necesarios para reproducir la configuració...