CVE-2021-4034-Linux

CVE-2021-4034 PoC für PwnKit: Lokale Privilegienausweitung-Schwachstelle in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2026-59354 Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the registering client. An attacker who possess...

EUVD-2026-66977

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the registering client. An attacker who possess...

CVE-2026-59354

Spring Security's OAuth2 Authorization Server module (versions 7.0.0 through 7.0.4 ) is affected by insufficient validation of client metadata fields at the Dynamic Client Registration endpoint. When Dynamic Client Registration is explicitly enabled, an attacker holding a valid Initial Access Tok...

EUVD-2026-66475

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

EUVD-2026-66582

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...

EUVD-2026-66382

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

EUVD-2026-66390

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

EUVD-2026-66363

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-30862

CVE-2026-30862 PoC - Escalation of Privileges in Appsmith Proof-of-Concept per l'Escalation of Privileges in Appsmith tramite Stored XSS Divulgazione: Segnalato originariamente da me tramite GHSA-5hw4-whxv-6794 ⚠️ Solo per uso autorizzato in test di penetrazione/ricerca. Informazioni sulla...

pwnKit

pwnKit Informazioni: Titolo: pwnKit Descrizione: Escalation dei privilegi in sistemi operativi Unix-like AUTORE: drapl0n Versione: 1.0 Categoria: Escalation dei privilegi Target: Sistemi operativi Unix-like Modalità di attacco: HID pwnKit è un payload USB-Rubber-Ducky per l'escalation dei...

sudo-chroot

Descrizione: Sudo prima della versione 1.9.17p1 consente agli utenti locali di ottenere accesso root perché /etc/nsswitch.conf da una directory controllata dall'utente viene utilizzato con l'opzione --chroot. Escalation dei privilegi locali tramite sudo-chroot -R...

pack2theroot-lab

Pack2TheRoot Lab — CVE-2026-41651 Un laboratorio Dockerizzato in stile CTF per l'escalation locale dei privilegi, costruito attorno all'advisory Pack2TheRoot CVE-2026-41651, una vulnerabilità di 12 anni nel demone PackageKit divulgata dal Red Team di Deutsche Telekom il 22 aprile 2026. Il...

copyfail-rs

copyfail-rs Multi-Vektor-PoC + gepaarte Erkennung für CVE-2026-31431 CopyFail. Enthält einen neuartigen PAM-Auth-Bypass-Vektor, den kein anderer öffentlicher PoC mitliefert. Der Erkennungsmodus erfasst, was AIDE / Wazuh / OSSEC / Tripwire strukturell nicht können. Einzelne statische Binärdatei. 1...

harden-docker-seccomp

harden-docker-seccomp Script idempotente per bloccare la creazione di socket AFALG per tutti i container Docker su un host come mitigazione per CVE-2026-31431 "Copy Fail". Contesto CVE-2026-31431 è un'escalation di privilegi locale nel template crittografico authencesn del kernel Linux, presente...

CVE-2021-4034-Rust

CVE-2021-4034-Rust Linux-LPE mit polkit-1, geschrieben in Rust. Build-Anleitung Rust installieren, falls noch nicht geschehen root@kitploit: git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build --release...

CVE-2026-13415

The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the Editor role when the administrator has granted the Editor role access to the CMP WordPress plugin before 4.1.18's admin-bar controls to...

cve-2026-32746-mitigation

CVE-2026-32746: Strumento Avanzato di Mitigazione per il Networking Linux 🚨 DISCLAIMER TECNICO CVE-2026-32746 è una vulnerabilità ipotetica utilizzata per dimostrazioni educative. Questo strumento affronta lo scenario della "Tempesta Perfetta": un demone Telnet non sicuro dal punto di vista della...

detect_CVE-2026-25177

detect-CVE-2026-25177 प्रोडक्शन-सुरक्षित स्कैनर जो CVE-2026-25177 — Active Directory SPN यूनिकोड कोलिजन भेद्यता CVSS 8.8 के शोषण का पता लगाता है। यह भेद्यता किसी भी प्रमाणित उपयोगकर्ता को write-SPN अनुमतियों के साथ Service Principal Names में यूनिकोड वर्ण इंजेक्ट करके SYSTEM तक विशेषाधिकार बढ़ाने...

CVE-2025-32463

CVE-2025-32463 🚨 Escalatazione dei privilegi a root utilizzandosudo chroot. Non è necessario gcc installato. 🚀 Cos'è CVE-2025-32463? CVE-2025-32463 è una vulnerabilità Linux che consente a un attaccante locale di elevare i propri privilegi a root abusando del comando sudo chroot. A differenza di...