CVE-2026-71179

Dell Update Package Framework (versions prior to 26.07.03) contains an OS Command Injection vulnerability (Improper Neutralization of Special Elements used in an OS Command). A low-privileged attacker with local access could potentially exploit this flaw, requiring user interaction, to achieve el...

CVE-2026-21533_Scanner.py

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation Detection Tool Este repositorio contiene una herramienta de detección para la vulnerabilidad CVE-2026-21533, una falla de gestión de privilegios en los Servicios de Escritorio Remoto RDS de Windows que podría permitir a un atacante...

CVE-2025-36591

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

EUVD-2026-80833

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-26947

Dell ECS (versions 3.8.1.0 through 3.8.1.7) and Dell ObjectScale (versions prior to 4.4.0.0) contain an Improper Privilege Management vulnerability. A high-privileged attacker with local access can exploit this to achieve elevation of privileges , with full impact on confidentiality, integrity, a...

CVE-2025-36591

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

EUVD-2025-210917

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-36591

Dell ECS (versions 3.8.1.0 through 3.8.1.7) and Dell ObjectScale (versions prior to 4.4.0.0) contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high-privileged attacker with local access could potentially exploit this flaw, leading to information exposure . The assigned C...

Review.CVE-2021-3156

👑 CVE-2021-3156 Baron Samedit — Escalada de Privilegios mediante Desbordamiento de Heap en sudo 📅 Fecha: 2025-06-08 ✍️ Autor: @TopskiyPavelQwertyGang 🧠 Investigador de Seguridad | Entusiasta del Red Team 🧠 Resumen del CVE CVE-ID: CVE-2021-3156 Tipo: Desbordamiento de Búfer basado en Heap...

CVE-2023-43352-CMSmadesimple-SSTI--Content

CMSmadesimple SSTI v2.2.18 作者: Sergio 描述: CMSmadesimple v.2.2.18 中的服务器端模板注入（SSTI）漏洞允许本地攻击者使用原生模板语法将恶意负载注入模板，并在服务器端执行。 攻击向量: 在"内容 - 内容管理器菜单"中，对内容字段的消毒处理存在 SSTI 漏洞，允许将恶意负载注入模板代码，当用户访问网页时会被执行。 POC： 登录面板后，我们将进入"内容管理器 - 标题"部分（位于内容菜单中）。 我们编辑该内容字段，填入一个模板恶意负载。 SSTI 负载： root@kitploit: 44...

CVE-2024-36821

CVE-2024-36821 包含CVE-2024-36821漏洞所需最低限度信息的公开参考 包含PoC的原始视频可在以下链接找到 - https://www.youtube.com/watch?v=6vHno0ik7JY PoC： 1. 通过UART连接连接到路由器 2. 使用 guest:guest 凭据登录系统 3. 使用 find / -perm -777 -type f 2/dev/null 命令查找具有读-写-执行权限的文件： root@kitploit: 1. /tmp/cron/cron.daily/sysinfocleanup.sh 2...

CVE-2024-50251-PoC

CVE-2024-50251-PoC Just a local Dos bug in Linux kernel...

CVE-2021-28312

CVE-2021-28312 POC y descripción para CVE-2021-28312 Vulnerabilidad de denegación de servicio de Windows NTFS Enlace: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28312 Reproducción Desde cmd: escriba el siguiente comando cd c::$i30:$bitmap Posibilidad de explotación...

CVE-2026-87282

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87274

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

CVE-2026-87248

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-87183

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-83420

Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft component: Engineering. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

CVE-2026-83413

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83414

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle...