Lucene search
+L

247 matches found

EUVD
EUVD
โ€ขadded 2026/09/10 5:15 p.m.โ€ข4 views

EUVD-2026-75625

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...

2.4CVSS
SaveExploits0References1
CVE
CVE
โ€ขadded 2026/09/10 5:13 p.m.โ€ข7 views

CVE-2026-15417

CVE-2026-15417 affects the silabser.sys Windows 8 driver for Silicon Labs CP210x USB-to-serial devices. A local unprivileged user can trigger a kernel crash (denial of service) by applying incorrect driver settings, with no user interaction required and low attack complexity. The CVSS 4.0 score i...

6.9CVSS
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/09/10 1:44 a.m.โ€ข7 views

copyfail-mitigation

CVE-2026-31431 โ€” Copy Fail Linux Kernelalgifaead Privilege Escalation / Memory Corruption Ansible-based audit and mitigation playbooks โ€” ready to run in production Overview Copy Fail CVE-2026-31431 is a vulnerability in the Linux kernel's algifaead module โ€” the userspace-facing AEAD interface of...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
โ€ขadded 2026/09/10 1:42 a.m.โ€ข8 views

cve-2026-31431-ansible

CVE-2026-31431 "Copy Fail" โ€” Ansible Mitigation Recipe Detect and apply the kernel-cmdline mitigation for CVE-2026-31431 "Copy Fail" across a Debian / Ubuntu / RHEL-family fleet using Ansible. The CVE is a local privilege-escalation flaw in the Linux kernel's algifaead AFALG interface. Any...

7.8CVSS6.6AI score0.99907EPSS
SaveExploits242References1
Kitploit
Kitploit
โ€ขadded 2026/09/09 10:09 p.m.โ€ข6 views

CVE-2020-8290

CVE-2020-8290 โ€“ Elevation of Privilege in Backblaze Summary Name: Elevation of Privilege in Backblaze CVE: CVE-2020-8290 Discoverer: Jason Geffner Vendor: Backblaze Product: Backblaze for Windows and Backblaze for macOS Risk: High Discovery Date: 2020-03-13 Publication Data: 2020-09-09 Fixed...

7.8CVSS7.4AI score0.00582EPSS
SaveExploits2
NVD
NVD
โ€ขadded 2026/09/09 7:17 p.m.โ€ข5 views

CVE-2025-51619

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

5.5CVSS
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/09/08 5:37 p.m.โ€ข9 views

CVE-2022-0847-Docker

Dirty Pipe CVE-2022-0847: A Hands-On Exploit Demonstration in Docker This repository provides a self-contained, interactive Docker environment to safely demonstrate and analyze the "Dirty Pipe" privilege escalation vulnerability. It is designed as an educational tool for security professionals to...

7.8CVSS7.1AI score0.89721EPSS
SaveExploits102
Kitploit
Kitploit
โ€ขadded 2026/09/06 7:48 p.m.โ€ข5 views

Dirty-Frag

๐Ÿ’ฅ CVE-2026-43284 โ€” Dirty Frag ๐Ÿ’ฅ โšก Dirty Frag Local Privilege Escalation Proof of Concept โšก ๐Ÿ“– Description This repository contains a Proof of Concept PoC for: CVE-2026-43284 โ€” Dirty Frag The exploit demonstrates a vulnerability affecting vulnerable Linux systems. ๐Ÿง  About Dirty Frag Dirty Frag...

8.8CVSS7.3AI score0.93235EPSS
SaveExploits34
Kitploit
Kitploit
โ€ขadded 2026/09/03 7:40 p.m.โ€ข5 views

DEMO-Proof-of-Concept-Temporal-Memory-Inconsistency-in-cldflt.sys-CVE-2025-62221

Technical Analysis and Proof-of-Concept: Temporal Memory Inconsistency in cldflt.sys CVE-2025-62221 DEMO Proof-of-Concept: Temporal Memory Inconsistency in cldflt.sys CVE-2025-62221 CVE-2025-62221: This repository provides a comprehensive technical analysis and a Proof-of-Concept PoC demonstratio...

7.8CVSS7.7AI score0.02505EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
โ€ขadded 2026/09/03 12:00 a.m.โ€ข13 views

Linux Distros Unpatched Vulnerability : CVE-2026-78409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to opentree with ATSYMLINKNOFOLLOW. That...

7CVSS5.4AI score0.00124EPSS
SaveExploits0References2
EUVD
EUVD
โ€ขadded 2026/09/02 3:11 p.m.โ€ข7 views

EUVD-2026-70107

The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to opentree with ATSYMLINKNOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with...

7CVSS5.9AI score0.00124EPSS
SaveExploits0References3
Cvelist
Cvelist
โ€ขadded 2026/09/02 3:05 p.m.โ€ข59 views

CVE-2026-78410 Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

7.8CVSS0.00096EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
โ€ขadded 2026/09/02 3:05 p.m.โ€ข8 views

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

7.8CVSS5.3AI score0.00096EPSS
SaveExploits0
RedhatCVE
RedhatCVE
โ€ขadded 2026/09/02 2:34 p.m.โ€ข7 views

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

7.8CVSS5.8AI score0.00096EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
โ€ขadded 2026/09/02 2:34 p.m.โ€ข8 views

CVE-2026-78409

The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to opentree with ATSYMLINKNOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with...

7CVSS5.9AI score0.00124EPSS
SaveExploits0References4
OSV
OSV
โ€ขadded 2026/08/31 2:14 p.m.โ€ข19 views

CVE-2026-78422 zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.8AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
โ€ขadded 2026/08/28 8:16 a.m.โ€ข13 views

CVE-2026-80663

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...

7.1CVSS5.8AI score0.00126EPSS
SaveExploits0References8
EUVD
EUVD
โ€ขadded 2026/08/28 6:49 a.m.โ€ข11 views

EUVD-2026-67539

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...

5.8AI score0.00126EPSS
SaveExploits0References6
EUVD
EUVD
โ€ขadded 2026/08/26 4:30 a.m.โ€ข9 views

EUVD-2026-66234

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

7.8CVSS5.4AI score0.00119EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
โ€ขadded 2026/08/24 6:06 p.m.โ€ข8 views

CVE-2026-74716

A flaw was found in the Linux kernel's amdxdna graphics driver. An unprivileged local user could exploit a vulnerability in how the driver handles memory management operations. By performing specific memory mapping and access patterns, a user could trigger an assertion failure, leading to a syste...

5.5CVSS5.4AI score0.00155EPSS
SaveExploits0References4
Rows per page
Query Builder