CVE-2025-27591-PoC

CVE-2025-27591 PoC: تصعيد الامتيازات محليًا في Below v0.9.0 إثبات مفهوم لـ CVE-2025-27591، وهي ثغرة تسمح للمستخدمين المحليين غير المميزين بتصعيد امتيازاتهم إلى صلاحيات الجذر عبر هجمات الروابط الرمزية. 🕵️‍♂️ التفاصيل الفنية تؤثر الثغرة على خدمة Below الإصدارات الأقدم من v0.9.0. تنشئ هذه الخدمة دليل...

PATCH-CVE-2026-31431-Ubuntu_Debian

🛡️ تخفيف CVE-2026-31431 فشل النسخ - نواة لينكس يحتوي هذا المستودع على سكربتات مصممة لتحييد الثغرة الأمنية الحرجة CVE-2026-31431 ، الملقبة بـ "Copy Fail" ، على أنظمة Ubuntu. !IMPORTANT التوافق: هذه السكربتات مصممة ومختبرة على Ubuntu Server 24.04 LTS. على الرغم من أن المنطق مشابه للتوزيعات الأخرى،...

CVE-2023-3897

CVE-2023-3897 Windows 배포에서 On-premise SureMDM 솔루션의 CAPTCHA 우회를 통해 사용자 이름 열거가 가능하며, 이를 통해 공격자가 오류 메시지를 통해 로컬 사용자 정보를 열거할 수 있습니다. 이 문제는 SureMDM On-premise 6.31 및 이하 버전에 영향을 미칩니다. https://nvd.nist.gov/vuln/detail/CVE-2023-3897...

CVE-2026-78409

The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to opentree with ATSYMLINKNOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with...

CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM

Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / डर्टी पाइप हैक किया गया डर्टी पाइप CVE-2022-0847 PoC जो SUID बाइनरी को हाईजैक करके रूट शेल प्राप्त करता है। और क्षतिग्रस्त बाइनरी को पुनर्स्थापित करने का भी प्रयास करता है CVSS स्कोर : 7.8 HIGH लिनक्स कर्नेल में copypagetoiterpipe और pushpipe फ़ंक्शनों में नए पाइप बफर संरचना के...

CVE-2026-16742

A flaw was found in systemd-homed. A local, logged-in user can exploit a missing signature verification in the authentication path when processing home records. This vulnerability allows the user to add arbitrary system groups to their account, which can lead to local privilege escalation and...

CVE-2025-32462-32463-Detection-Script-

CVE-2025-32462-32463-Detection-Script- लिनक्स पर महत्वपूर्ण Sudo कमजोरियाँ स्थानीय उपयोगकर्ताओं को रूट एक्सेस प्राप्त करने देती हैं, जो प्रमुख डिस्ट्रोज़ को प्रभावित करती हैं नीचे कमजोरियों का संक्षिप्त विवरण दिया गया है - root@kitploit: CVE-2025-32462 CVSS स्कोर: 2.8 - Sudo 1.9.17p1 से पहले, जब ...

l2tp-socket-bug

CVE-2014-4943 تتيح ميزة PPPoL2TP في net/l2tp/l2tpppp.c في نواة Linux حتى الإصدار 3.15.6 للمستخدمين المحليين كسب صلاحيات من خلال استغلال الاختلافات في بنية البيانات بين مقبس l2tp ومقبس inet. النتيجة الأساسية وفق CVSS v2: 6.9 متوسط...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC स्थानीय सुरक्षा बाईपास शेयर्ड मेमोरी के माध्यम से इंटर प्रोसेस कम्युनिकेशन एक अवधारणा है जहाँ दो या अधिक प्रक्रियाएँ सामान्य मेमोरी तक पहुँच सकती हैं। और संचार इस साझा मेमोरी के माध्यम से किया जाता है जहाँ एक प्रक्रिया द्वारा किए गए परिवर्तनों को दूसरी प्रक्रिया...

CVE-2022-1813

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:37+00:00| seen| https://t.me/hackingAttack/54475 2026-09-02 01:01:48+00:00| seen| https://t.me/hackingAttack/54475...

ansible_CVE-2016-5195_check

الوصف Playbook لاختبار ثغرة dirty cow CVE-2016-5195. المتطلبات مستخدم محلي على النظام بصلاحيات sudo التشغيل root@kitploit: ansible-playbook -i host, check.yml -u jondoe -k -K الروابط http://dirtycow.ninja...

CVE-2024-37081

CVE-2024-37081: تصعيد امتيازات محلي متعدد في VMware vCenter Server يحتوي vCenter Server على ثغرات متعددة لتصعيد الامتيازات المحلية بسبب سوء تكوين sudo. يمكن للمستخدم المحلي المُوثَّق الذي لا يمتلك صلاحيات إدارية استغلال هذه المشكلات لرفع الامتيازات إلى صلاحيات الجذر root على vCenter Server...

CVE-2026-80607

A flaw was found in the Linux kernel's tracing/probes component. A local user could trigger a kernel warning WARNONONCE by adding a kprobe event based on a raw address with a BTF BPF Type Format parameter. This could lead to minor information disclosure through kernel log messages...

CVE-2026-15059

A flaw was found in systemd-oomd. Local unprivileged users can exploit a missing path traversal validation in the systemd-oomd Inter-Process Communication IPC Application Programming Interface API. This vulnerability allows them to terminate arbitrary local processes, leading to a denial of...

kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...

CVE-2026-80709

A flaw was found in the Linux kernel's s390/zcrypt component. An incorrect upper limit check for the domain value when processing an EP11 Cryptographic Coprocessor Request Block CPRB can allow a local user on custom device nodes to access heap memory. This could lead to information disclosure or...

CVE-2020-8635

What's this Wing FTP Server 6.2.3 - Privilege Escalation Exploit Introduction Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and...

CVE-2026-19820

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

EUVD-2026-68916

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...