CVE-2026-105740

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution RCE on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exe...

CVE-2026-43499-OnePlus15

CVE-2026-43499 — OnePlus 15 LPE Educational PoC WARNING: This repository is provided for educational and research purposes only. No pre-built binaries or releases are distributed. You must build everything from source. Android 16 local privilege escalation for OnePlus 15. Fork of...

cve-2023-36845-scanner

Escáner de Vulnerabilidades para Juniper CVE-2023-36845 Este escáner de vulnerabilidades se puede utilizar para escanear firewalls Juniper y determinar si son vulnerables a CVE-2023-36845. Debido a que está construido sobre go-exploit, este escáner tiene dos fases: Verificación del objetivo para...

CVE-2026-43499-popsicle

CVE-2026-43499 para popsicle Este repositorio contiene una implementación de escalada de privilegios local de Android 16 para CVE-2026-43499 en Xiaomi 17 Pro Max popsicle. Kernel verificado: 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k Los modelos Xiaomi 17, Pro y Ultra que usan ese kerne...

CVE-2021-44168

Exploit for CVE-2021-44168 Purpose Exploit CVE-2021-44168 to drop a shell on a Fortigate firewall and enable its access via LDPRELOAD tricks that execute when running some of Fortigate's CLI commands. You get a root shell. Use Compile: gcc -o gensrc-vispkgfile gensrc-vispkgfile.c -lz Run: %...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC Proof-of-Concept of Local Privilege Escalation for FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and below 5.2 Triggered by fnsysctl and USB so physical access required. This PoC spawns local root shell by exploiting CVE-2017-14187. Write-up Korean English TL;DR 1. fnsysctl cp...

ghostlock-aak-apk

GhostLock AAK Launcher CVE-2026-43499 · Linux kernel rtmutex stack Use-After-Free local privilege escalation LPE loader/trigger This repository is a security research and proof-of-concept PoC project , used to demonstrate and verify the trigger flow of the CVE-2026-43499 GhostLock vulnerability i...

process-injection-playground

Parque de Juegos de Inyección de Procesos en Linux Una colección completa de técnicas de inyección de procesos para Linux, que demuestra varios métodos para inyectar código en procesos en ejecución. Estos ejemplos están pensados con fines educativos, investigación de seguridad y comprensión de la...

tools-for-CVE-2018-1000001

Herramientas para CVE-2018-1000001 Comprobar vulnerabilidad: $ cat /proc/sys/kernel/unprivilegedusernsclone Salida: 1 Si el archivo "/proc/sys/kernel/unprivilegedusernsclone" no existe: $ unshare -mU /bin/sh -c "sleep 5" & /bin/sh -c "sleep 1; cd /proc/$!/cwd; realpath .; kill -9 $!" La salida de...

CVE-2026-43499_OPPO-MT6835

CVE-2026-43499 / PoC de GhostLock para OPPO MT6835 Este repositorio conserva una instantánea de investigación compacta para la cadena de explotación estilo GhostLock dirigida a un dispositivo basado en OPPO MT6835. Alcance Árbol de código fuente del exploit en exploit Prueba de concepto mínima en...

CVE-2023-1521

PoC gcc -shared -o libpoc.so poc.c -fPIC export LDPRELOAD=fullpathtolibpoc.so sccache gcc foo.c -o foo...

yellow

| | | | | | |/ \ | |/ \ \ /\ / / | || | / | | \ V V / , ||||/ // |/ - Just add blue. yellow - solo añade azul Modificaciones binarias sencillas que activarán un canarytoken cuando se ejecute un binario. Ideal para colocar trampas en sistemas de producción contra atacantes. Actualmente hay...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q Root de KernelSU sin desbloqueo de Bootloader CVE-2026-43499 root temporal → canal LDPRELOAD para eludir DEFEX → kernelsu.ko compilado con clang-12 sin LTO → su + KernelSU Manager con funcionalidad completa Estado: ✅ Verificado en dispositivo real el 2026-08-12...

CVE-2026-43499-S26

CVE-2026-43499 — Exploit del kernel de Android GKI 6.12 pselect / configfs Un exploit del kernel de Linux para la línea GKI 6.12 de Android dispositivos Samsung y Pixel dirigido a CVE-2026-43499 : un rollback defectuoso de removewaiter en rtmutexstartproxylock que usa current en lugar de...

goahead-rce-exploit

GoAhead Web Server 2.5 use multi/handler msf6 exploitmulti/handler set payload generic/shellbindtcp msf6 exploitmulti/handler set LPORT=1337 msf6 exploitmulti/handler set RHOST=192.168.1.200 msf6 exploitmulti/handler run Started bind TCP handler against 192.168.1.200:1337 Then, in another shell,...

CVE-2026-35031

CVE-2026-35031: Vulnerabilidad de Path Traversal en la Subida de Subtítulos de Jellyfin que deriva en RCE -darkred?style=flat-square -orange?style=flat-square TL;DR Una vulnerabilidad crítica de path traversal en Jellyfin Media Server permite a usuarios autenticados con el permiso "Upload...

automation-controller: automation-controller-container: automation-controller: the AWX_TASK_ENV setting applies arbitrary environment variables to the control-plane web and task processes, enabling TLS interception of external credentials and code execution

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The AWXTASKENV setting accepts arbitrary environment variable keys with no restriction, and its values are applied directly to the running automation controller web and task processes rather than only to sandboxed...

automation-controller: automation-controller-container: automation-controller: GALAXY_TASK_ENV setting is not filtered for dynamic-linker / interpreter environment variables, allowing a system administrator to achieve code execution in the project-update execution environment

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The GALAXYTASKENV setting, whose values are added to the environment of the ansible-galaxy commands run during project updates, is not validated to exclude dynamic-linker and interpreter environment variables such a...

CVE-2026-84706 Automation-controller: automation-controller-container: automation-controller: credential type env-injector deny-list omits process-hijacking variables (bash_env/ld_preload) allowing code execution in the execution environment

A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable injector validates variable names against a deny-list an ANSIBLE prefix check plus a fixed ENVBLOCKLIST that omits process-hijacking loader variables such as BASHENV, ENV,...

CVE-2026-79919

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LDPRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback so the dlopen call-stack heuristic sees a Python import frame, then use unhooked dlsym...