CVE-2026-16003

CVE-2026-16003 affects the ASUS Armoury Crate driver , which exposes an IOCTL interface with insufficient access control . A local user with low privileges can craft an IOCTL request to bypass the driver's verification and add an arbitrary process identifier to the driver's whitelist . The CVSS 4...

BypassUAC

README This program is based on whitelist bypassuac. Using CS's AV-bypassing payload, you can directly get a session with UAC privileges. Usage: bypassuac.exe The demo effect is as follows whoami /priv as follows hashdump captures passwords as follows Bypass-AV Effect Windows Defender test passed...

CVE-2015-3224

Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...

CVE-2025-46080

BUG作者: yggcwhat 受影响版本: Huocms 厂商: https://huocms.com/ 源码地址: https://gitee.com/digital-flag/huocms 漏洞文件: AttachmentController.php 受影响版本： HuoCMS - controller -backend - AttachmentController.php:editFileUrl 在 editFileUrl 方法中调用的 copy 函数中，$newPathUrl 的后缀未经过白名单验证，可被利用来修改文件名。后缀由传入的 suffixurl 控制，且其可控。...

CVE-2022-46169

CVE-2022-46169 Cacti 盲远程代码执行（预认证） 免责声明 本内容仅供教育目的使用。我不对你的行为负责。请自行斟酌使用。 说明 该脚本暴力破解利用此漏洞所需的变量。此漏洞利用需要以下 3 个变量： 白名单 IP 地址 正确的 hostid 参数 正确的 localdataids 参数 文件 remoteagent.php 受 IP 白名单保护。你可以通过在 X-Forwarded-IP 头中伪造你的 IP 地址来绕过此保护。大多数实例会将 127.0.0.1 或服务器自身的 IP 地址加入白名单。 接下来，你需要暴力破解 hostid 和 localdataids...

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Unauthenticated Arbitrary File Upload. Description : The Ninja Forms - File Uploads plugin for WordPress is vulnerable to unauthenticated arbitrary file upload due to missing file type validation and missing capability checks in the...

CVE-2025-66249-POC

CVE-2025-66249 — Apache Livy 路径遍历白名单绕过 仅供教育和安全研究使用。请勿对您不拥有或未获明确书面许可的系统进行测试。→完整免责声明 概述 字段| 详情 ---|--- CVE ID| CVE-2025-66249 严重性| 重要（CVSS 不适用 — 截至 2026-03-15，NVD 评估待定） 影响版本| Apache Livy 0.3.0-incubating 至 0.8.0-incubating — 仅当livy.file.local-dir-whitelist 设置为非默认值时 修复版本| Apache Livy 0.9.0-incubatin...

CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...

CVE-2026-71551 Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with childprocess.exec. The...

CVE-2026-71551 Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with childprocess.exec. The...

NPM: MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions

NPM: MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions vulnerability discovered by ? in WordPress Npm magicmirror versions 2.37.0...

EUVD-2026-61070

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, MagicMirror applies ipWhitelist only as Express middleware, while the Socket.IO server in js/server.js is attached directly to the HTTP server without equivalent IP allowlist, origin, or namespace authentication checks...

CVE-2026-63649

A flaw was found in the Windows interactive service of OpenVPN. A local authenticated user could exploit this vulnerability by crafting specific options to bypass whitelist checks. This bypass allows the user to load arbitrary configuration files, which could lead to privilege escalation or other...

UBUNTU-CVE-2026-63649

The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks...

PT-2026-72123

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.4.0 through 2.6.21 OpenVPN versions 2.7 alpha1 through 2.7.5 Description The Windows interactive service allows local authenticated users to bypass the trusted configuration directory constraint. This is achieved by using...

DEBIAN-CVE-2026-68267

In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RINGFORCETONONPRIVDENY to OA whitelists Unconditionally whitelisting OA registers is a security violation. Set RINGFORCETONONPRIVDENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default...

CVE-2026-68267

In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RINGFORCETONONPRIVDENY to OA whitelists Unconditionally whitelisting OA registers is a security violation. Set RINGFORCETONONPRIVDENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default...

CVE-2026-48030

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler allows any authenticated user to execute arbitrary OS commands by injecting shell metacharacters into the 'dir' POST...

CVE-2026-54540 Authenticated terminal command whitelist bypass in Pheditor

Pheditor is a single-file editor and file manager written in PHP. Prior to version 2.0.5, there is an authenticated terminal command whitelist bypass. The terminal feature checks whether the submitted command starts with one of the configured TERMINALCOMMANDS values, then passes the full command...

CVE-2026-48030

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler allows any authenticated user to execute arbitrary OS commands by injecting shell metacharacters into the 'dir' POST...