CVE-2025-1974

CVE-2025-1974 White Hat School 3rd Cohort - Kim So-eun @salt318 https://github.com/salt318/vulhub Summary Caused by a defect in the Ingress-NGINX Admission Controller, a core security mechanism of Kubernetes The Ingress-NGINX Admission Controller is exposed to the network without authentication...

CVE-2023-49979

CVE-2023-49979 Best Student Management System v1.0 - Incorrect Access Control - Directory Listing Description : A directory listing vulnerability in Best Student Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring...

SideWinder-Exploit

🛡️ CVE-2021-3560 Privilege Escalation Exercise 📚 Overview This repository contains materials for a hands-on cybersecurity exercise centered on CVE-2021-3560 , a privilege escalation vulnerability in polkit. Discovered by GitHub Security Lab in 2021, this flaw allowed unprivileged Linux users to...

EUVD-2026-97244

The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of its bulk comment-deletion routines, allowing authenticated users with minimal permissions, such as subscribers, to permanently delete all comments on the site...

CVE-2026-20127_EXP

CVE-2026-20127EXP Cisco Catalyst SD-WAN Authentication Bypass Vulnerability CVE-2026-20127 Exploit EXP Basic Usage python scan.py -f targets.txt Display Detailed Information python scan.py -f targets.txt -v Adjust Thread Count and Save Results python scan.py -f targets.txt -t 10 -o vulnerable.txt...

CVE-2026-109080

The Flock Night Shift hosted service is vulnerable to a SQL injection flaw within its bulk license plate search functionality. An authenticated user could exploit this by providing a crafted license plate value to access and read data belonging to other customer organizations, specifically licens...

sony-bravia-root-toolkit

sony-bravia-root-toolkit CVE-2019-2215 & DirtyCOW exploit automation + post-root debloat + Magisk modules for Sony BRAVIA KDL-43W800C...

hikvision-unauthenticated-rce-cve-2021-36260

Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description An attacker can use this vulnerability to gain complete control of the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras, they...

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

CVE-2026-49060-Lab

CVE-2026-49060 - Hippoo Mobile App for WooCommerce Incorrect Privilege Assignment / Privilege Escalation Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-49060, an Incorrect Privilege Assignment vulnerability affecting the WordPress plugin Hipp...

CVE-2026-21139

The Samsung Continuity Service for Windows is vulnerable to improper access control in versions prior to 4.6.1217.0 . This security flaw allows an adjacent attacker to manipulate a connected mobile device. No specific root cause, exploit details, or remediation steps are provided in the documents...

EUVD-2026-97203

Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

CVE-2026-21137

A path traversal vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to access files with Smart Switch privilege . No specific exploit details or remediation steps are provided in the documents.

EUVD-2026-97201

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

EUVD-2026-97199

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

CVE-2026-21135

The Samsung Internet browser, in versions prior to 30.0.5.6 , is affected by an improper access control vulnerability. This flaw allows local attackers to gain unauthorized access to sensitive information . No specific root cause, exploit details, or remediation instructions are provided in the d...

EUVD-2026-97187

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock...

CVE-2026-21119

The software component lib_sag_ai_sound_sep_v2.00.so is vulnerable to an out-of-bounds read and write condition in versions prior to the SMR Oct-2026 Release 1 . This flaw allows a local attacker to read from and write to memory outside of the intended boundaries. While the specific technical roo...

CVE-2026-21118

An improper access control vulnerability exists in the DownloadProvider component on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to gain unauthorized access to files located within scoped storage . Exploitation details and specific exploit paths are not provided...