EUVD-2026-71683

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform privileged hardware operations by opening...

CVE-2026-80112

PassMark PerformanceTest , BurnInTest , and OSForensics each ship a vulnerable DirectIo64.sys kernel driver. The root cause is an improper access control flaw: the device object is created without a security descriptor, so Windows applies a permissive default ACL . This allows unprivileged local ...

CVE-2023-46870

CVE-2023-46870 Las versiones 3.0.0, 3.1.0, 4.0.0, 4.1.0 y 4.1.1 del Nordic Semiconductor nRF Sniffer for Bluetooth LE tienen permisos de archivo incorrectos establecidos, lo que permite a adversarios realizar escalada de privilegios y ejecución de código modificando scripts bash y python. Palabra...

CVE-2026-78328

CVE-2026-78328 is a missing authorization (CWE-862) vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface. A lower-privileged Admin user can escalate privileges to SuperAdmin . SonicWall rates it CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The NVD/CNA entr...

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

EUVD-2026-71680

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

CVE-2021-3156-Project

CVE-2021-3156 — Baron Samedit Desbordamiento de búfer basado en heap en sudo → Escalada local de privilegios Departamento de Ciberseguridad ITSOLERA | Prácticas de Red Team 2026 root@kitploit: ██████╗ █████╗ ██████╗ ██████╗ ███╗ ██╗ ███████╗ █████╗ ███╗ ███╗███████╗██████╗ ██╗████████╗...

CVE-2024-1086

CVE-2024-1086 针对 CVE-2024-1086 的通用本地权限提升概念验证漏洞利用，适用于大多数介于 v5.14 至 v6.6 之间的 Linux 内核，包括 Debian、Ubuntu 和 KernelCTF。在 KernelCTF 镜像中成功率为 99.4%。 https://github.com/Notselwyn/CVE-2024-1086/assets/68616630/a3d43951-94ab-4c09-a14b-07b81f89b3de 博客文章 / 详细分析 漏洞的完整分析——包括背景信息和大量有用的图表——可以在 Flipping Pages 博客文章...

CVE-2026-82329-poc

Herramienta de Evaluación de Seguridad CVE-2026-82329 para Artifactory PoC y herramienta de validación para identificar instalaciones de JFrog Artifactory self-hosted afectadas por CVE-2026-82329. Esta herramienta valida la siguiente cadena de autenticación: 1. Crea un JWT HS256 de join utilizand...

zimbra-cve-2026-73570-ir

Zimbra CVE-2026-73570 Community IR Toolkit Detection-first, evidence-preserving incident-response helpers for Zimbra administrators investigating suspected exploitation of CVE-2026-73570. !CAUTION This is an independent community project, not a vendor compromise oracle. The checker is read-only a...

EUVD-2026-60964

CodeWhale: execshellinteract sends LLM-controlled input to a running shell without an approval prompt privilege escalation...

CVE-2017-7358

creationtimestamp| type| source ---|---|--- 2026-09-04 18:00:03+00:00| seen| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww 2026-09-05 01:00:21+00:00| published-proof-of-concept| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww...

EUVD-2026-71619

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

CVE-2026-85656

CVE-2026-85656 is an OS command injection vulnerability in the log4j-cve-2021-44228-hotpatch package in Amazon Linux versions before 1.3-9 . A local user with low privileges can execute arbitrary commands with root privileges by leveraging embedded newline characters in a Java process's executabl...

PS4-5.05-Kernel-Exploit

PS4 5.05 Kernel Exploit Resumen En este proyecto encontrarás una implementación completa del segundo exploit de kernel "bpf" para PlayStation 4 en la versión 5.05. Te permitirá ejecutar código arbitrario como kernel, para permitir el jailbreak y modificaciones a nivel de kernel en el sistema. Est...

tpwn

tpwn cve-2015-???? poc os x 10.10.5 escalada local de privilegios del kernel la vulnerabilidad se quemó en 10.11 writeup completo etason agradecimiento a @ unthreadedjb por hax Instala NULLGuard para protegerte contra tpwn y otros errores de desreferencia de puntero NULL...

tcp-zerocopy-sm

Investigation is closed. Working fork: https://github.com/soumarcelino/Root-My-Galaxy-SM-S918B Read this - https://github.com/BuSung-dev/Root-My-Galaxy-Payloads/issues/160issuecomment-5227077583 Attempts to cause rights elevation w GhostLock via TCP Zerocopy. Designed expecially for 5.15. samsung...

ESCepcion

🛡️ ESCepcion Active Directory Certificate Services Auditor ESCepcion es una herramienta de código abierto Open Source para la auditoría y evaluación de vulnerabilidades en infraestructuras de Active Directory Certificate Services AD CS. Está diseñada para automatizar la detección de rutas de...

token-priv

Abusando de los privilegios de token para EoP Agosto de 2017 Bryan Alexander @dronesec Stephen Breen @breenmachine Este repositorio contiene todo el código y un artículo de estilo Phrack sobre la investigación del abuso de los privilegios de token para la escalada de privilegios. No dudes en...

acunetix_0day

Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Uso Ejecuta el script con root@kitploit: dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444...