CVE-2024-27674

CVE-2024-27674 Macro Expert icacls "C:\Program Files x86\GrassSoft\Macro Expert" C:\Program Files x86\GrassSoft\Macro Expert BUILTIN\Users:OICIM NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:ICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF...

CVE-2026-12191

CVE-2026-12191 A proof-of-concept exploit for CVE-2026-12191, an insecure deserialization vulnerability in Comma AI Openpilot's modeld.py, that allows a local low-privileged attacker to achieve arbitrary code execution by supplying a crafted malicious Python pickle payload to the...

CVE-2025-4802-Proof-of-Concept

CVE-2025-4802 — Proof of Concept ⚠️ Disclaimer: This repository is for educational and authorized security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Misuse may violate laws and regulations. CVE Summary Field| Details ---|---...

CVE-2023-27704

CVE-2023-27704 CVE-2023-27704 Se descubrió que Void Tools Everything anterior a v1.4.1.1022 contiene una Denegación de Servicio por Expresión Regular ReDoS corregido en Everything 1.5 alpha Descripción sugerida Se descubrió que Void Tools Everything anterior a v1.4.1.1022 contiene una Denegación ...

CVE-2022-0185-Analysis-and-Exploit

CVE-2022-0185-Análisis-y-Exploit Investigación y prueba de concepto para la vulnerabilidad de desbordamiento de montón del kernel Linux CVE-2022-0185. CVE-2022-0185 – Análisis de Desbordamiento de Montón del Kernel Linux Resumen CVE-2022-0185 es una vulnerabilidad de desbordamiento de búfer basad...

CVE-2022-0847

CVE-2022-0847 Descripción - POC para CVE-2022-0847: Vulnerabilidad de escalada de privilegios local en el kernel de Linux. - creado por antx el 2022-03-08. Detalle - El investigador de seguridad Max Kellermann reveló responsablemente la vulnerabilidad 'Dirty Pipe' y afirmó que afecta al kernel...

Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462

⚠️ CVE‑2025‑32463 y CVE‑2025‑32462 – Fallos de escalada de privilegios en Sudo en Linux 🧠 TL;DR En julio de 2025, dos vulnerabilidades recién divulgadas en la utilidad sudo—CVE-2025-32463 y CVE-2025-32462 —han puesto en riesgo numerosas distribuciones de Linux. La más grave de las dos,...

CVE-2026-98243

A flaw was found in the Linux kernel's dma-buf subsystem. When querying driver or timeline names on synchronization fences, the kernel fails to properly verify the fence signaling state before accessing operational handlers. This flaw can lead to a use-after-free condition where previously releas...

CVE-2024-26574

CVE-2024-26574 Wondershare Filmora v.13.0.51 - Escalada de Privilegios por Permisos Inseguros Descripción: Una vulnerabilidad de permisos inseguros en Wondershare Filmora y versiones anteriores permite que un atacante local sin privilegios ejecute código arbitrario como SYSTEM a través de un scri...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE Original CVE source written by xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Rewritten so the exploit can be run in 1 shell original exploit requires 2 shells. Compile make all Create mount point for fuse filesystem mkdir -p /tmp/fusepwn/lower Star...

CVE-2026-98309

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the VideoCore IV vc4 display driver where background polling tasks are not properly finalized when the driver is unbound. A local user could exploit this flaw by unbinding the device or unloading the driver module,...

CVE-2026-98305

A flaw was found in the Linux kernel's MaxLinear MXL862xx Ethernet switch driver. Improper synchronization during device initialization failure, teardown, or shutdown allows background statistics polling to continue running after port resources have been released. This issue can allow a local use...

CVE-2024-48990

CVE-2024-48990 hola esto es 0x3bs En máquina víctima: set -e cd /tmp 1. Create the malicious module directory structure mkdir -p malicious/importlib En máquina atacante para compilar lib.c en máquina atacante : gcc -shared -fPIC -o exp.so lib.c y en máquina víctima : en /tmp chmod +x run.sh en...

CVE-2026-98301

A flaw was found in the Linux kernel's network bridge subsystem. A local user with network configuration privileges can trigger a Denial of Service DoS by updating bridge Multiple Spanning Tree MST states. Because a blocking operation is invoked within an atomic execution context that cannot safe...

CVE-2026-98299

A flaw was found in the Linux kernel's TCP networking subsystem. A privileged local user can cause a Denial of Service DoS by configuring TCP receive buffer limits to an abnormally low value. This improper setting causes the kernel to encounter a division-by-zero error during buffer adjustment...

CVE-2026-98297

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs when network transmission requests are queued while the Bluetooth device is being shut down and its background workqueue is draining. A local attacker could exploit this vulnerability by sending data through...

cve-2024-25423

cve-2024-25423 Un problema en MAXON CINEMA 4D R2024.2.0 permite a un atacante local ejecutar código arbitrario a través de un archivo c4d manipulado. Información adicional Vulnerabilidad de escritura fuera de los límites en Cinema 4D al analizar archivos c4d Componente afectado c4dbase.xdl64...

CVE-2022-24611

CVE-2022-24611 Details regarding the Z-Wave S0-No-More attack. For a full analysis and report how this works and how to reproduce the findings see the attached PDF file. Short description: Denial of Service attack against S0 and S2 devices tested with the Z- Wave ZW5xx product line, here...

CVE-2022-37706

CVE-2022-37706 La vulnerabilidad CVE-2022-37706 está relacionada con el gestor de ventanas Enlightenment , específicamente el binario enlightenmentsys. Este binario tiene el bit SUID Set User ID activado, lo que significa que puede ejecutarse con privilegios elevados normalmente como el usuario...

CVE-2025-32463

Resumen de la vulnerabilidad CVE-2025-32463 afecta a las versiones de Sudo 1.9.14 a 1.9.16 corregido en 1.9.17p1. Cuando se invoca Sudo con la opción --chroot, puede cargar la configuración desde una ruta controlada por un atacante, lo que provoca la ejecución de código arbitrario y la escalada d...