EUVD-2026-94689

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...

EulerOS 2.0 SP15 : NetworkManager (EulerOS-SA-2026-3961)

According to the versions of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when...

PT-2026-107794

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.2.2d Brocade Fabric OS versions 10.0.0 through 10.0.0a1 Description A local privilege escalation issue exists in the system logging daemon. Insufficient access controls on internal inter-process...

EulerOS 2.0 SP15 : acl (EulerOS-SA-2026-3896)

According to the versions of the acl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile, aclextendedfile, a...

CVE-2023-32233-reproduction

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root-Cause Analysis What this repo is: my hands-on reproduction and study of CVE-2023-32233, a use-after-free in the Linux kernel Netfilter nftables subsystem that allows local privilege escalation, publicly disclosed in May 2023 by Patryk...

CVE-2021-3156

CVE-2021-3156 Overview Heap-based buffer overflow in Sudo CVE-2021-3156 Heap overflow vulnerability caused by improper escaping of \ in sudo, LPE Affected Versions All versions from 1.8.2 to 1.8.31p2 All stable versions from 1.9.0 to 1.9.5p1 Detection Command sudoedit -s '' perl -e 'print "A" x...

CVE-2026-34990

CVE-2026-34990 - CUPS Local Privesc Local privilege escalation against CUPS = 2.4.16 running as root. Leaks cupsd's Local auth token, then writes a NOPASSWD sudoers fragment as root via a file:// print queue. Usage python3 poc.py On success: CVE-2026-34990 | user=ctfplayer | cupsd=127.0.0.1:631...

CVE-2026-34990-poc

CVE-2026-34990: CUPS 2.4.16 local privilege escalation PoC A Python3 adaptation of the original CUPS disclosure and PoC that runs as an ordinary local user against an existing CUPS service. It demonstrates a leaked Authorization: Local token and a race that lets CUPS write a file as root. Usage...

CVE-2026-34990

CVE-2026-34990 — escalation locale di privilegi in CUPS cups2root, de-harnessed CVSS 3.x : 8.4 HIGH approssimativo — verificare CWE : CWE-287 Autenticazione Impropria + CWE-269 Gestione Impropria dei Privilegi Fix : CUPS 2.4.17+ Interessa: CUPS ≤ 2.4.16 con cupsd in esecuzione come root e 631...

cups-2.4.16-lpe

CUPS 2.4.16 — Local Privilege Escalation CVE-2026-34990 📋 Summary CUPS 2.4.16 contains a local privilege escalation vulnerability also tracked as GHSA-c54j-2vqw-wpwp. The Vulnerability 1. World-writable socket — /run/cups/cups.sock is world-writable, allowing any local user to send IPP requests t...

CVE-2026-34990-CUPS-LPE-PoC

CVE-2026-34990 | CUPS Local Privilege Escalation PoC A generic proof-of-concept for CVE-2026-34990 , a local privilege escalation vulnerability affecting CUPS 2.4.16. The exploit demonstrates how a local unprivileged user can abuse CUPS local authentication and printer configuration behavior to...

CVE-2026-34990-poc

CVE-2026-34990 — CUPS Local unprivileged user → root , via a leaked CUPS Local authorization token and a policy-bypassing file:/// print queue. PoC by 0xcybersoldier Table of Contents Overview Vulnerability Details Affected Versions Attack Chain Requirements Installation Usage Example Run How It...

CVE-2026-76266 Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-system commands with root privileges. The...

CVE-2026-76266

Splunk Enterprise on Linux versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 is vulnerable to Local Privilege Escalation . A local user capable of running commands as the Splunk Enterprise user account can trigger the execution of attacker-controlled operating-system commands with root privilege...

cifswitch-check

cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 — a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...

Detections-CVE-2026-31431

MOVING TO: https://github.com/insomnisec/publiccvedetections FOR BETTER LONG TERM MANAGEMENT OF DETECTION PUBLICATIONS THIS REPO WILL BE REMOVED IN JUNE 2026 PLEASE USE THE OTHER REPO GOING FORWARD CVE-2026-31431 "Copy Fail" — Detection & Response Package Published: 2026-04-30 CVSSv3: 7.8 High...

CVE-2026-31431-Metasploit-exploit

CVE-2026-31431 - Linux Kernel AFALG "Copy Fail" Local Privilege Escalation An automated Metasploit Post-Exploitation module that leverages CVE-2026-31431 popularly known as "Copy Fail" to perform Local Privilege Escalation LPE on vulnerable Linux kernels versions 4.14 through 6.19.12. Description...

CVE-2025-32463_sudo_chroot

CVE-2025-32463 - sudo chroot Usage The Dockerfile creates a safe, isolated testing environment with a vulnerable version of sudo 1.9.16p2 installed. This allows you to test the exploit without affecting your host system. Build the vulnerable test environment docker build -t cve . Run the containe...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag Diagnostic — CVE-2026-43284 A community diagnostic tool to determine whether an XCP-ng dom0 host is exposed to CVE-2026-43284 "Dirty Frag", a local privilege escalation vulnerability in the Linux kernel's xfrm-ESP subsystem. TL;DR — All current XCP-ng releases 8.1, 8.2, 8.3...

CVE-2026-3888-POC-all-from-the-Qualys-platform.

CVE-2026-3888: snapd Local Privilege Escalation PoC Proof of concept for the local privilege escalation vulnerability in snapd CVE-2026-3888. This flaw allows an unprivileged local attacker to elevate their privileges to root on affected Ubuntu systems by recreating the private directory /tmp/.sn...