privesc-CVE-2015-5602

Sudo =1.8.14 Lokale Privilegienerweiterung Sudo su „do" ermöglicht einem Systemadministrator, bestimmten Benutzern oder Benutzergruppen die Möglichkeit zu geben, einige oder alle Befehle als root auszuführen, während alle Befehle und Argumente protokolliert werden. Verwundbare Umgebung Um eine...

cheese

Exploit di root per Quest 3/3S per l'aggiornamento del 7 agosto 2025 e precedenti, basato su CVE-2025-21479. screenshot di Magisk, Cheese e Termux con una shell di root Avvertenza: Il rooting è pericoloso. Se brickate un Quest 3/3S, non c'è modo di ripararlo. Questo disabilita tutta la sicurezza...

CVE-2024-23346-rust-exploit

Uno script di exploit in Rust per CVE-2024-23346. Come mostrato sotto, il POC sfrutta la vulnerabilità di code injection ed esegue comandi shell remoti come in un Terminale. poc.webm Passi per eseguire l'exploit: Esegui direttamente con Cargo cargo run -- --help cargo run -- --target...

DblTekGoIPPwn

DblTekGoIPPwn Tool to exploit challenge response system in vulnerable DblTek GoIP devices. Can generate responses to specified challenges, test hosts for the vulnerability, run commands on vulnerable hosts, send SMS messages from a host, and drop into a root shell on any vulnerable host. The...

golang security update

An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

RLSA-2026:22120 Important: golang security update

The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum validation flaw via malicious module proxy...

LACheck

LACheck Enumerazione dei privilegi amministrativi locali con assembly .NET C multithread Argomenti root@kitploit: ./LACheck.exe help | | /\ / | | | | | | / \ | | | | | | | | / /\ \ | | | ' \ / / | |/ / | | / \ | || | | | / | |// \ || |||||\ Usage: LACheck.exe smb rpc...

SambaHunter

SambaHunter E' un semplice script per sfruttare la RCE su Samba CVE-2017-7494. Ora funziona con Python3. Molte delle librerie richieste per Python2 sono deprecate es. commands Aggiunto logging per mostrare quali condivisioni sono scrivibili. Se appare 'Exploit Finished' ma nessuna condivisione è...

inject-assembly

inject-assembly - Eseguire .NET in un Processo Esistente Questo strumento è un'alternativa alla tradizionale esecuzione fork and run per Cobalt Strike. Il loader può essere iniettato in qualsiasi processo, incluso il Beacon corrente. Gli assembly a lunga esecuzione continueranno a funzionare e...

golang security update

An update is available for golang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

RLSA-2026:22121 Important: golang security update

The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum validation flaw via malicious module proxy...

cve-2020-7247

cve-2020-7247 Titolo exploit: OpenSMTPD 6.6.2 - Esecuzione di codice remoto. La nuova data: 2020-01-29. Autore exploit: 1F98D. Autore originale: Qualys Security Advisory. Homepage del fornitore: https://www.opensmtpd.org/. Link del software:...

RLSA-2026:22112 Important: go-toolset:rhel8 security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum...

go-toolset:rhel8 security update

An update is available for golang, module.golang, module.delve, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming...

findyara-ida

FindYara Verwende dieses IDA-Python-Plugin, um deine Binärdatei mit Yara-Regeln zu scannen. Alle Yara-Regeltreffer werden mit ihrem Offset aufgelistet, sodass du schnell zu ihnen springen kannst! 🍻 Alle Anerkennung für dieses Plugin und den Code geht an David Berard @p0ly 🍻 Dieses Plugin ist von...

PT-2026-81961

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

PT-2026-81935

The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

PT-2026-81939

LcpDecodeConfig did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp8 or potentially execute arbitra...

CodeQL 2.26.4

Discover vulnerabilities across a codebase with CodeQL, an industry-leading semantic code analysis engine. CodeQL lets you query code as though it were data. Write a query to find all variants of a vulnerability, eradicating it forever. Then share your query to help others do the same...

PT-2026-81950

The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frm user id' parameter in all versions up to, and including, 6.33.1 due to insufficient input sanitization and output escaping...