CVE-2026-17475

IBM Planning Analytics versions 2.0 and 2.1 are affected by a security vulnerability where a remote authenticated attacker can delete folders and applications belonging to other users. This is caused by improper functional level access control (CWE-285). The vulnerability has a High base severity...

CVE-2026-17475 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control...

CVE-2026-19620

IBM Planning Analytics versions 2.0 and 2.1 are vulnerable to a security flaw that allows a remote attacker to gain unauthorized administrative access . This issue is caused by improper authentication (CWE-288). The vulnerability has a CVSS 3.1 base score of 8.8 (HIGH) , indicating high impact on...

CVE-2026-75063 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding...

CVE-2026-75063

The Planning Analytics Workspace component of IBM Planning Analytics Local versions 2.0 and 2.1 is susceptible to a Cross-Site Scripting (XSS) vulnerability (CWE-79 ). This is caused by improper output encoding , which could allow a remote authenticated attacker to execute arbitrary JavaScript. T...

CVE-2026-19627

IBM Planning Analytics versions 2.0 and 2.1 are vulnerable to a security flaw caused by improper validation of file paths . This allows a remote attacker to read arbitrary host files and overwrite certain application files . The vulnerability is associated with CWE-22 (Path Traversal). No specifi...

CVE-2026-85457 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

Exploit for Privilege Chaining in Canonical Ubuntu_Linux

CVE-2026-3888: snap-confine and systemd-tmpfiles race This re...

CVE-2022-29597

CVE-2022-29597: Local File Inclusion in RSS v500 The RRS v500 application by Solutions Atlantic is vulnerable to a Local File Inclusion LFI vulnerability. Any authenticated user has the ability to reference internal system files within requests made to the...

CVE-2021-36808

CVE-2021-36808 A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115. Advisory: https://www.sophos.com/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypass Write Up:...

CVE-2022-0847-L-nux-PrivEsc

CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. - create by antx at 2022-03-08. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later...

CVE-2026-109596

Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory,...

CVE-2023-54407 Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback...

CVE-2026-49484

Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where...

CVE-2026-49483

Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were accepted after checking that a procedure existed without reliably verifying component integrity. Components installed...

CVE-2025-60710

CVE-2025-60710 This is PoC for local privilege escalation vulnerability in \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration scheduled task. When this scheduled task is started the taskhostw.exe process whill try to open the C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP directory...

CVE-2026-46215-POC

CVE-2026-46215: DRM GEM changehandle Use-After-Free unprivileged LPE Local privilege escalation via a use-after-free in the DRM core ioctl DRMIOCTLGEMCHANGEHANDLE drmgemchangehandleioctl, ioctl nr 0xD2. Reachable by any user with access to a render node /dev/dri/renderD, granted to the active...

CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll A high-severity Use-After-Free vulnerability affecting the Linux Kerneleventpoll subsystem that may allow local privilege escalation, memory corruption, or denial of service. 📖 Overview CVE-2026-46242 is a Use-After-Free UAF vulnerability in the Linux Kernel's eventpol...

CVE-2021-4034-PwnKit-

CVE-2021-4034 PwnKit - Analysis and Exploitation This repository contains the source code to demonstrate the exploitation of the CVE-2021-4034 vulnerability, also known as PwnKit , discovered in pkexec part of the Polkit package. This flaw allows local privilege escalation to root through the use...

CVE-2026-23111

CVE-2026-23111 PoC Linux Kernel nftables Use-After-Free Local Privilege Escalation poc by baba01hacker Vulnerability Summary CVE : CVE-2026-23111 Type : Use-After-Free CWE-416 CVSS : 7.8 HIGH Component : net/netfilter/nftablesapi.c — nftmapcatchallactivate Root Cause : Inverted genmask check caus...