CVE-2026-31431_je_sappelle_RoOt

CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! 📌 Repository Purpose This repository documents the CVE-2026-31431 vulnerability, nicknamed Copy Fail , and provides a defensive remediation procedure for potentially exposed Linux systems. ⚠️ This repository is strictly focused on defense, authorize...

EUVD-2026-74182

The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...

CVE-2026-78630

CVE-2026-78630 affects Okta Access Gateway due to improper input neutralization in SNMP configuration processing. Shell metacharacters in SNMP configuration values are not sanitized before a privileged script uses them to construct OS commands, allowing an authenticated local user with access to ...

CVE-2021-3156

CVE-2021-3156 Resumen Desbordamiento de búfer basado en montón en Sudo CVE-2021-3156 Vulnerabilidad de desbordamiento de montón causada por el escape incorrecto de \ en sudo, LPE Versiones afectadas Todas las versiones desde 1.8.2 hasta 1.8.31p2 Todas las versiones estables desde 1.9.0 hasta...

Exploit-Dirty-Cow

Exploit - Dirty Cow CVE-2016-5195 Escalamiento de Privilegios | Exploit de Kernel Linux 📋 Descripción Laboratorio práctico donde se reproduce la vulnerabilidad DirtyCow CVE-2016-5195, una condición de carrera crítica encontrada en el kernel de Linux que permite a usuarios sin privilegios obtener...

CVE-2024-48990-PoC-Testing

CVE-2024-48990-PoC-Testing 🐍🔓 Este repositorio contiene una Prueba de Concepto PoC para demostrar una vulnerabilidad en el programaneedrestart, que no establece correctamente la ruta de Python, lo que puede provocar una escalada de privilegios. La PoC destaca un posible camino para obtener...

firefox: thunderbird: Privilege escalation in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Networking: Cookies component...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

firefox: thunderbird: Privilege escalation in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Networking component...

firefox: Privilege escalation in the Remote Settings Client component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Remote Settings Client component...

firefox: thunderbird: Privilege escalation in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

CVE-2026-87049

A flaw was found in operator-foundry. Untrusted external actors can exploit over-permissive GitHub access tokens and Google Cloud Platform GCP Workload Identity Federation credentials granted to a third-party reusable workflow. By invoking this workflow on untrusted-triggerable events without...

EUVD-2026-74243

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. A low-privileged attacker could exploit this...

Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag

Reporte de Escalada de Privilegios Local — Dirty Frag Estudiante: Jonatan Claudio 1. Requerimientos Resumen de la metodología Se realizó una evaluación de vulnerabilidades sobre una máquina virtual con Kali Linux utilizando un script detector para la vulnerabilidad Dirty Frag, asociada a las...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Descripción Esta demostración tuvo lugar en HITCON 2023 en Taiwán. La demo destaca la explotación de AMDCpuProfiler.sys dentro de AMD μProf. Al provocar una escritura arbitraria en el token EPROCESS, se logra una escalada de privilegios al nivel SYSTEM. Deshabilita...

Docker-Runc-Exploit

Docker-Runc-Exploit Exploit de Docker runc CVE-2019-5736 Dockerfile. Créditos : https://github.com/Frichetten/CVE-2019-5736-PoC.git...

jailbreak-iOS12

Jailbreak para iOS 12 Jailbreak para iOS 12.0 y 12.1.2 con CVE-2019-6225 Un Jailbreak incompleto para iOS 12. Por ahora solo ejecuta el exploit, obtiene tfp0, obtiene ROOT, escapa del SandBox, escribe un archivo de prueba para demostrar que se escapó del sandbox y luego reinicia el SpringBoard...

Detection-and-Mitigation-for-CVE-2022-1679

Detection-and-Mitigation-for-CVE-2022-1679 The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw...

CVE-2026-28659

MicroXR Blobstore in Android XR contains a missing permission check that allows access to files belonging to other applications. The vulnerability enables local privilege escalation without requiring additional execution privileges or user interaction. The Android CNA (Google) assigns a CVSS 4.0 ...

EUVD-2026-74052

In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...