Exploit for Classic Buffer Overflow in Qualcomm Aqt1000_Firmware

BlackBerry KEY2 Research Reverse-engineering, unlock, and Lin...

CVE-2026-102282 adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via fs.chmodSync when keepOriginalPermission=true is passed to extractAllTo/extractEntryTo — and it...

CVE-2026-102282

The adm-zip Node.js library (prior to 0.6.1 ) contains a vulnerability where it preserves SUID , SGID , and sticky bits from untrusted ZIP archives when the keepOriginalPermission=true flag is enabled. Specifically, the fileAttr property in headers/entryHeader.js uses an incorrect bitmask (0xfff)...

CVE-2026-102282 adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via fs.chmodSync when keepOriginalPermission=true is passed to extractAllTo/extractEntryTo — and it...

CVE-2026-102282 adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via fs.chmodSync when keepOriginalPermission=true is passed to extractAllTo/extractEntryTo — and it...

CVE-2026-102282

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via "fs.chmodSync" when "keepOriginalPermission=true" is passed to "extractAllTo"/"extractEntryTo" — a...

EUVD-2026-92493

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via fs.chmodSync when keepOriginalPermission=true is passed to extractAllTo/extractEntryTo — and it...

CVE-2026-59783

A flaw was found in Zabbix Server and Proxy. In deployments configured with a MySQL or MariaDB database backend, an authenticated remote attacker can cause a denial of service DoS by submitting binary items containing null bytes. This improper input handling causes the server or proxy process to...

ptrace Credential Steal LPE (CVE-2026-4633)

Local privilege escalation via CVE-2026-4633: ptracemayaccess / pidfdget credential-steal primitive. Compiles and uploads exploit to the target session to obtain root. !/usr/bin/env python3 -- coding: utf-8 -- """Linux LPE via ptrace credential steal CVE-2026-4633.""" import os import shlex impor...

OverlayFS FUSE LPE (CVE-2023-0386)

Local privilege escalation via CVE-2023-0386: FUSE + overlayfs copyup mishandles user xattrs on privileged files, allowing a low-privilege user to write SUID shell or /etc/passwd entries. Compiles and uploads the exploit to the target session requires libfuse-dev on operator host. !/usr/bin/env...

nf_tables Double-Free LPE (CVE-2024-1086)

Local privilege escalation via CVE-2024-1086: nftables nftverdictinit accepts NFDROP with positive errno, causing skb double-free in nfhookslow. Uploads and executes a compiled exploit on the target session requires unprivileged user namespaces and nftables on the victim. !/usr/bin/env python3 --...

nf_tables catch-all UAF LPE (CVE-2026-23111)

Local privilege escalation via CVE-2026-23111: nftables nftmapcatchallactivate abort-path use-after-free. Uploads and executes exploit binary on the target session to obtain root. !/usr/bin/env python3 -- coding: utf-8 -- """Linux LPE via nftables catch-all UAF CVE-2026-23111.""" import os import...

bad_epoll UAF LPE (CVE-2026-46242)

Local privilege escalation via CVE-2026-46242 epoll use-after-free. Compiles and uploads exploit to target session for root shell. !/usr/bin/env python3 -- coding: utf-8 -- """Linux LPE via epoll UAF CVE-2026-46242.""" import os import shlex import tempfile from kittysploit import from...

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were easy to overlook. There are actively exploited bugs in the mix, cleaner intrusion paths, smarter...

CVE-2026-77805

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insufficient. Before executing a helper tool, the application only verifies that the file carries a valid Authenticode...

EUVD-2026-92428

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insufficient. Before executing a helper tool, the application only verifies that the file carries a valid Authenticode...

CVE-2026-77805

Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021 , is vulnerable to a weak executable signature verification flaw. The application fails to verify that external helper tools are the specific executables shipped with the product; instead, it only checks if the fi...

CVE-2026-77805 Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classic

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insufficient. Before executing a helper tool, the application only verifies that the file carries a valid Authenticode...

CVE-2026-77805 Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classic

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insufficient. Before executing a helper tool, the application only verifies that the file carries a valid Authenticode...

copy-fail-c

Copy Fail CVE-2026-31431 - Porting C Inglese en ∙ Giapponese ja ∙ Cinese semplificato zh-cn ∙ Coreano ko ∙ Russo ru Una reimplementazione C multipiattaforma dell'LPE Linux Copy Fail CVE-2026-31431, divulgato il 29-04-2026 da Theori / Xint. Consulta il writeup canonico su copy.fail per la...