289371 matches found
check-cve-2026-23111
CVE-2026-23111 防御性验证脚本 概述 CVE-2026-23111 是 Linux 内核 nftables 中的一个漏洞，在启用了用户命名空间和 nftables 的系统上，非特权用户可利用该漏洞实现本地权限提升。12 公开的厂商和政府公告将其描述为一个影响 Linux 发行版的本地问题，并强调修补是首要修复措施。34 本仓库包含一个防御性验证脚本 ，旨在帮助评估主机是否暴露了与该 CVE 相关的技术条件，而无需提供权限提升漏洞利用程序。它会检查相关的内核和运行时条件，可选地加载 nftables 模块以进行完整的功能测试，尝试使用 unshare 和 nft...
CVE-2026-43284
Dirty Frag - Vulnerabilidad crítica del kernel Linux - CVE-2026-43284 📚 Introducción La cadena de explotación, clasificada como Escalada Local de Privilegios LPE , permite a un usuario sin privilegios obtener acceso root en prácticamente todas las distribuciones modernas de Linux que ejecutan...
sentric-core
SENTRIC Autonomous AI agent with its own cryptographic identity. It hunts CVEs, builds isolated exploit labs, validates vulnerabilities with working PoCs, and funds itself by trading crypto — 24/7, with no human in the loop. Built by one person on a home PC. Portugal, 2026. The problem it solves...
CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra
CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: La vulnerabilidad de Cross Site Scripting en CMSmadesimple v.2.2.18 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el campo Extra del menú Content - News. Vectores de ataque: Una vulnerabilida...
CVE-2023-44762_ConcreteCMS-Reflected-XSS---Tags
ConcreteCMS 反射型XSS v.9.2.1 作者: Sergio 描述: ConcreteCMS v.9.2.1 中存在跨站脚本漏洞，允许本地攻击者通过向"设置 - 标签"中的标签字段注入特制脚本来执行任意代码。 攻击向量: "设置 - 标签"中标签输入清理机制存在漏洞，允许注入JavaScript代码，当用户访问网页时这些代码将被执行。 概念验证: 登录面板后，我们将进入"仪表盘菜单中的设置 - 标签"部分。 XSS 载荷: 在下图中，你可以看到嵌入的代码，该代码在主网页中执行载荷。 附加信息: https://www.concretecms.com/...
CVE-2023-40297
CVE-2023-40297 Stakater Forecastle = v1.0.144 allows directory traversal in the website component Vulnerability Type Directory Traversal Vendor of Product Stakater Affected Product Code Base Forecastle = v1.0.144 Affected Component Affected components: URL - https://www.example.com/%5C../etc/pass...
Fragnesia
本地提权 CVE-2026-46300 使用方式： CGOENABLED=0 go build -ldflags="-s -w" -o fragnesia . ./fragnesia 影响版本: Ubuntu 16.04 LTS RHEL 8,9 Rocky Linux 8,9,10 CentOS Stream 8,9,10 Oracle Linux 8,9 openEuler 20.03-LTS-SP4 22.03-LTS-SP3 22.03-LTS-SP4 24.03-LTS 24.03-LTS-SP1 24.03-LTS-SP2 24.03-LTS-SP3...
DirtyFrag
本地提权 / 容器逃逸 CVE-2026-43284 / CVE-2026-43500 使用方式： CGOENABLED=0 go build -ldflags="-s -w" -o dirtyfrag . ./dirtyfrag 影响版本: Ubuntu 24.04.4 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS 14.04 LTS RHEL 8.x,9.x,10.1 CentOS 8,9,10 Rocky Linux 8,9,10 Oracle Linux 8,9...
CVE-2026-0073-Android-adbd-authentication-bypass
Investigación sobre CVE-2026-0073. Una omisión de autenticación que permite a cualquier atacante con acceso a la red local conectarse a un dispositivo Android con herramientas de desarrollo y depuración inalámbrica o ADB sobre TCP habilitados. El dispositivo debe haber sido emparejado antes. Esto...
CVE-2023-3897
CVE-2023-3897 通过绕过CAPTCHA，在Windows部署的本地SureMDM解决方案中可以实现用户名枚举，攻击者可以通过错误消息枚举本地用户信息。 该问题影响SureMDM本地版：6.31及以下版本 https://nvd.nist.gov/vuln/detail/CVE-2023-3897 https://www.42gears.com/trust-center/information-security/security-advisories/42g-2023-003/ https://www.exploit-db.com/exploits/51804...
CVE-2026-104854
A flaw was found in Nx. The application creates communication endpoints Unix domain sockets for its background service and worker processes in shared temporary directories without proper access permissions or authentication. A local attacker sharing the same system can connect to these endpoints ...
CVE-2026-89972
A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...
CVE-2026-38765
CVE-2026-38765 Un problema en Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 permite a un atacante local escalar privilegios a través del controlador del kernel pgsecdl.sys...
CVE-2026-38764
CVE-2026-38764 Unistal Systems Pvt. Ltd. 的 Protegent 360 v2.0.0.4 中存在一个漏洞，允许本地攻击者通过内核驱动程序 pgsecdl.sys 提升权限。...
CVE-2026-43494-PinTheft-PoC
SLEY — PoC de PinTheft CVE-2026-43494 Prueba de concepto — uid=1000raken → uid=0root después de ./sley en WSL2 6.6.87.2-microsoft-standard-WSL2 Prueba de concepto de un solo archivo para CVE-2026-43494 PinTheft: una escalada local de privilegios en el kernel de Linux que encadena un bug de conteo...
CVE-2017-1000117
Repositorio PoC para CVE-2017-1000117 de VulApps Bifurcado desde joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git escribirá la salida de id en un archivo vul en /var/www/html. Ver más en VulApps...
CVE-2026-31431_je_sappelle_RoOt
CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! 📌 Objetivo del repositorio Este repositorio documenta la vulnerabilidad CVE-2026-31431 , apodada Copy Fail , y propone un procedimiento de remediación defensiva para sistemas Linux potencialmente expuestos. ⚠️ Este repositorio está estrictamente...
libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...
CVE-2026-105249
A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...