nightmare-exploit-roadmap

🌙 nightmare-exploit-roadmap - Your Guide to Binary Exploitatio...

The vulnerability of the Microsoft SQL Server database management system, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001148)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001148 advisory. The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modifyuserhwbreakpoint that can result in crash and possibly memory corruption. This atta...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004259 advisory. The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001597)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001597 advisory. The initnewcontext function in arch/x86/include/asm/mmucontext.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004336)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004336 advisory. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability,...

The vulnerability of Google Chrome’s Split View component, which allows attackers to perform spoofing attacks

The vulnerability of Google Chrome’s Split View component is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001451)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001451 advisory. In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege wit...

CVE-2020-36929 Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path

Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPAAgent services to inject malicious executables an...

CVE-2023-7334

Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind.PriorityLevel,AppCode.ashx?method=GetStoreWarehouseByStore...

CVE-2021-47766 Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated)

Kmaleon 1.1.0.205 contains an authenticated SQL injection vulnerability in the 'tipocomb' parameter of kmaleonW.php that allows attackers to manipulate database queries. Attackers can exploit this vulnerability using boolean-based, error-based, and time-based blind SQL injection techniques to...

CVE-2026-22645

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...

EUVD-2026-2802

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...

CVE-2025-68968

Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002478 advisory. The pnrecvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure ha...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

⚡ Pentest Automation !Versionhttps://img.shields.io/badg...

red-team-arsenal

🎯 Red Team Arsenal !Versionhttps://img.shields.io/badge/...

CVE-2025-37185

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attacks against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary...

CVE-2026-22239

The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable email sending API. Successful exploitation of this vulnerability could allow the...

CVE-2026-22238

The CVE-2026-22238 issue affects BLUVOYIX and stems from improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker can send crafted HTTP requests to create a new admin user, potentially granting full access to customer data and compromising the platform by logging in ...