Vulnerable-Docker-Engine

CVE-2021-41091 Questo exploit offre un'analisi approfondita della vulnerabilità di sicurezza CVE-2021-41091 e fornisce una guida passo-passo su come utilizzare lo script di exploit per ottenere un'escalation dei privilegi su un host. Riepilogo della vulnerabilità CVE-2021-41091 è un difetto in Mo...

CVE-2026-74716

A flaw was found in the Linux kernel's amdxdna graphics driver. An unprivileged local user could exploit a vulnerability in how the driver handles memory management operations. By performing specific memory mapping and access patterns, a user could trigger an assertion failure, leading to a syste...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ إثبات مفهوم لتصعيد الامتيازات المحلي عبر Dirty Frag ⚡ 📖 الوصف يحتوي هذا المستودع على إثبات مفهوم PoC لما يلي: CVE-2026-43284 — Dirty Frag يُظهر الاستغلال ثغرة تؤثر على أنظمة Linux الضعيفة. 🧠 حول Dirty Frag Dirty Frag يُشار إليها أحيانًا باسم Copy Fail 2 هي ثغرة...

CVE-2026-74618

A flaw was found in the Linux kernel's binfmtmisc component. An unprivileged local user can exploit this vulnerability by manipulating user and mount namespaces to repeatedly trigger a warning condition during the mounting of binfmtmisc. This repeated triggering can lead to kernel log flooding,...

CVE-2026-74619

A flaw was found in the Linux kernel's overlay filesystem overlayfs. An unprivileged local user can repeatedly trigger a warning condition by manipulating user and mount namespaces and file system context operations. This can lead to kernel log flooding, kernel tainting, and potentially a system...

CVE-2026-59567

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...

EUVD-2026-64884

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...

EUVD-2026-64883

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...

CVE-2026-59567 Local privilege escalation

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...

CVE-2026-59567

Zscaler Client Connector is affected by multiple local privilege escalation vulnerabilities that allow an unprivileged user to execute arbitrary code in a privileged context . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interacti...

CVE-2022-22706-poc

CVE-2022-22706 - Page-Cache-Schreiben Der Arm-Mali-GPU-Treiber übergibt dem Userspace eine CPU-beschreibbare Abbildung von Seiten, die er schreibgeschützt gepinnt hat, sodass ein unprivilegierter Prozess einen beschreibbaren Alias des Page-Cache erhält, der eine Datei unterstützt, die er nur mit...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor patches that incorrectly validate the size of an internal structure, resulting in a out-of-bounds read in the notification handling code. This bug can be triggered by an unprivileged local user, and it can lead to information disclosure from adjace...

CVE-2022-0847

CVE-2022-0847 Linux “Dirty Pipe” consente a utenti non privilegiati di ottenere accesso root...

container-escape-ebpf

Libro bianco https://www.scs-europe.net/dlib/2026/2026-0321.html Assunzioni L'host esegue una versione vulnerabile di runc: Per CVE-2025-31133: 1.2.7 e precedenti, 1.3.0-rc.1 fino a 1.3.2, 1.4.0-rc.1 e 1.4.0-rc.2. Per CVE-2024-21626: 1.0.0-rc93 fino a 1.1.11. Un utente non privilegiato è in grado...

CVE-2026-46331

CVE-2026-46331 - "pedit COW" Guida alla valutazione e mitigazione della vulnerabilità Questo repository contiene strumenti amministrativi di base per verificare l'esposizione e applicare mitigazioni temporanee contro la vulnerabilità di escalation dei privilegi locali CVE-2026-46331 nota come...

CVE-2026-28867-PoC

CVE-2026-28867 Comment ça marche La vulnérabilité existe parce que l'implémentation noyau de tcpsysctlinfo effectue une recherche globale de la connexion sans vérifier que le processus appelant possède la socket ou dispose de privilèges élevés comme root. Impact Un attaquant non privilégié peut...

bubblewrap

Bubblewrap Molti strumenti di runtime per container come systemd-nspawn, docker, ecc. si concentrano sul fornire infrastruttura per amministratori di sistema e strumenti di orchestrazione es. Kubernetes per eseguire container. Questi strumenti non sono adatti a essere affidati a utenti non...

PT-2026-80886

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...

SUSE CVE-2026-74600

In the Linux kernel, the following vulnerability has been resolved: mm/pagetablecheck: skip special zero mappings pagetablecheckset and pagetablecheckclear account mappings based on PageAnon. Shared zero-page PTEs and huge zero PMDs are special mappings, but pagetablecheck can still account them ...

SUSE CVE-2026-74610

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...