EUVD-2026-67948

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability...

CVE-2024-11003-POC

CVE-2024-11003-POC Beschreibung Qualys entdeckte, dass needrestart vor Version 3.8 unsanitisierte Daten an eine Bibliothek Modules::ScanDeps übergibt, die sichere Eingaben erwartet. Dies könnte es einem lokalen Angreifer ermöglichen, beliebige Shell-Befehle auszuführen. Siehe auch die zugehörige...

CVE-2026-16821

CVE-2026-16821 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where a format string vulnerability allows a local attacker with low privileges to gain elevated privileges , resulting in high impact to confidentiality, integrity, and availability. The CVSS 3.1 score is 7.0 (HIGH) with a vector...

CVE-2023-22809

CVE-2023-22809 Ref: https://vulners.com/cve/CVE-2023-22809 Titolo Exploit: sudo 1.8.0 - 1.9.12p1 - Escalation dei Privilegi Autore Exploit: n3m1.sys CVE: CVE-2023-22809 Data: 2023/01/21 Homepage del Venditore: https://www.sudo.ws/ Link del Software: https://www.sudo.ws/dist/sudo-1.9.12p1.tar.gz...

CVE-2023-42829

CVE-2023-42829; 'Un'app potrebbe essere in grado di accedere alle passphrase SSH' Questo documento presenta sia un'analisi di una vulnerabilità logica identificata nel binario ssh su macOS la mia prima vulnerabilità software! sia un'analisi della patch che mostra come Apple ha risolto la...

CVE-2026-75147

A flaw was found in FFmpeg's AV1 Real-time Transport Protocol RTP packetizer. A local attacker could entice a user to process a crafted AV1 input packet. This crafted packet could cause an out-of-bounds read, potentially leading to information disclosure or a denial of service DoS condition...

Dirty-Pipe-Exploits

CVE-2022-0847 Exploits Dirty Pipe Che cos'è? Divulgata il 7 marzo 2022 da Max Kellerman2, la CVE-2022-0847 è una vulnerabilità nel kernel Linux versioni tra la 5.8 e la 5.16.11 che consente agli attaccanti di sostituire file di sola lettura o immutabili e aumentare i propri privilegi sul sistema...

Exploit-PoC-para-CVE-2024-30085

🚨 Exploit PoC per CVE-2024-30085 Proof of Concept exploit per la vulnerabilità di elevazione dei privilegi CVE-2024-30085. Solo a scopo educativo e di ricerca sulla sicurezza. ⚠️ Avvertenza Legale USO ESCLUSIVAMENTE EDUCATIVO ✅ Ricerca di sicurezza autorizzata ✅ Laboratori controllati ✅ Educazione...

CockpitCMS-Arbitrary-File-Upload--XSS---Assets

Cockpit CMS 2.7.0 Caricamento File - XSS Autore: Sergio Descrizione: La vulnerabilità di caricamento file in Cockpit CMS 2.7.0 consente a un attaccante locale di caricare un file PDF con XSS nascosto. Vettori di attacco: AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L POC: Questa è la versione del software...

CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerability in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Front and back end - Pages in the Languages Menu. Attack Vectors: Scripting A vulnerability in the...

cve-2019-14220

Riepilogo Un metodo non protetto in un servizio bstutils in BlueStacks 4.120 e precedenti su Mac e 4.110 e precedenti su Windows permette a un attaccante locale di leggere il contenuto di file arbitrari con privilegi di sistema. Descrizione BlueStacks è un emulatore Android disponibile per sistem...

CVE-2026-56652

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

CVE-2024-55511

CVE-2024-55511 Este repositório foi arquivado e movido para cá Uma vulnerabilidade de desreferência de ponteiro nulo no Macrium Reflect anterior à versão 8.1.8017 permite que um atacante local cause uma falha no sistema ou potencialmente eleve seus privilégios através da execução de um executável...

EUVD-2026-67039

opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...

CVE-2026-80589

A flaw was found in the Linux kernel's block subsystem. This vulnerability occurs when a disk's initialization fails before it is fully integrated, causing a critical timer to remain active even after the associated memory is released. This improper handling of memory can lead to a use-after-free...

CVE-2026-80526

A flaw was found in the Linux kernel's ASoC Audio System on Chip tas2562 driver. The tas2562volumecontrolput function lacks proper validation of control values provided by userspace. A local attacker could exploit this by supplying a specially crafted value, leading to an array overflow and an...

CVE-2026-56652 Formula Injection in dool project

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

CVE-2026-56652

Dool (versions up to 1.3.8 ) is affected by a CSV injection vulnerability in its CSV export functionality. The tool fails to sanitize cell content beginning with special formula characters (=, +, -, or @), allowing a local attacker to craft a process name starting with one of these characters, th...

CVE-2026-56652 Formula Injection in dool project

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

CVE-2026-80568

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. Changing the diagnostic report type while a video stream V4L2 is active can alter the expected report size. Since V4L2 buffers are allocated based on the initial size at stream start, a larger subsequent report could lead to a he...