CVE-2017-7494

Exploit SambaCry CVE-2017-7494 CVE-2017-7494/SambaCry permite a usuarios autenticados subir una biblioteca compartida a una carpeta escribible y realizar un ataque de ejecución utilizando las bibliotecas subidas. Explicación de la vulnerabilidad SambaCry es una vulnerabilidad de validación de rut...

cve-2026-6471-postgres-logical-decoding-dlopen

PostgreSQL CVE-2026-6471: logical decoding dlopen of an arbitrary library PostgreSQL logical decoding lets a non-superuser role that holds the REPLICATION privilege create a logical replication slot and choose the output plugin. On affected versions there is no authorization check on that choice,...

linux_injector

linuxinjector A simple ptrace-less shared library injector for x64 Linux. Usage linuxinjector mode 1. normal dlopen 2. memfd + dlopen for injecting into containers 3. raw shellcode pid Target process id. Must have ptrace rights to it required for accessing /proc/$pid/mem. Not ptraced, so another...

CVE-2021-27928

CVE-2021-27928 In this repository, you will find a proof of concept of the exploitation of the CVE-2021-27928 flaw through a docker container. root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB...

CVE-2025-32463_exploit

CVE-2025-32463 — sudo "chwoot" chroot Local Privilege Escalation Local privilege escalation to root in sudo via the --chroot -R option. Works for any local user , including accounts with no sudoers entry at all e.g. www-data. sudo 1.9.14 – 1.9.17 chroots into the user-supplied directory while the...

CVE-2026-46529

通过PDF argv注入实现RCE CVE-2026-46529 atril/xreader/evince evspawn shell/ev-application.c 中 argv 注入的有效概念验证。在精心构造的PDF渲染页面上任意位置单击一次，即可利用运行查看器的用户权限执行任意代码。 此版本使用%f替换技术：dlopen目标路径由查看器本身在运行时发现，因此攻击者无需知道多格式文件在受害者文件系统中的任何位置（无需用户名、无需$HOME、无需下载目录）。 POC...

CVE-2026-47630

CVE-2026-47630 — NVIDIA Triton Inference Server: arbitrary dlopen via TRITONBATCHSTRATEGYPATH Absolute path traversal in the custom batching-strategy loader of triton-inference-server/core. A model configuration parameter is passed unvalidated to dlopenRTLDNOW | RTLDLOCAL, so anyone able to...

CVE-2025-4802-Proof-of-Concept

CVE-2025-4802 — Proof of Concept ⚠️ Disclaimer: This repository is for educational and authorized security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Misuse may violate laws and regulations. CVE Summary Field| Details ---|---...

...[ More ]

Arbitrary code execution is possible in the MQTTVersion utility of Paho version 1.3.15 due to unsafe loading and execution of untrusted shared libraries. When a user supplies a shared library path as a command-line argument, the application loads the library using dlopen and resolves an exported...

Paho 1.3.15 Path Hijacking / Code Execution

Arbitrary code execution is possible in the MQTTVersion utility of Paho version 1.3.15 due to uncontrolled loading of shared libraries using non-absolute paths. The application invokes dlopen with relative library names and relies on the dynamic loader’s search path to resolve the target library...

BIT-POSTGRESQL-2026-6471 PostgreSQL logical decoding can dlopen arbitrary file

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...

Exploit for Code Injection in Samba

SambaCry CVE-2017-7494 Exploit CVE-2017-7494/SambaCry allows...

SUSE CVE-2026-6471

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...

AZL-95696 CVE-2026-6471 affecting package postgresql 16.15-1

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...

CVE-2026-6471

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...

UBUNTU-CVE-2026-6471

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...

CVE-2026-6471

CVE-2026-6471 : Missing authorization in PostgreSQL logical decoding allows a non-superuser with the REPLICATION privilege to dlopen any file visible to the OS account running the server, via the chosen logical decoding plugin, potentially executing arbitrary code as that account. Affected: Postg...

EUVD-2026-57857

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...

CVE-2026-6471

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...

CVE-2026-6471 PostgreSQL logical decoding can dlopen arbitrary file

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...