293341 matches found
CVE-2026-23111
CVE-2026-23111 PoC Linux Kernel nftables Use-After-Free Local Privilege Escalation poc by baba01hacker Vulnerability Summary CVE : CVE-2026-23111 Type : Use-After-Free CWE-416 CVSS : 7.8 HIGH Component : net/netfilter/nftablesapi.c — nftmapcatchallactivate Root Cause : Inverted genmask check caus...
CVE-2022-22963
CVE-2022-22963 In versions 3.1.6, 3.2.2, and earlier versions of Spring Cloud Function, when using the routing functionality, it is possible for a user to provide a specially crafted SpEL as a routing expression that can result in remote code execution and access to local resources. PoC Clone the...
CVE-2026-49484 Code for IBM i: Temporary files are visible to all users
Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where...
CVE-2026-49484
The Code for IBM i Visual Studio Code extension (prior to version 3.0.1 ) contains a vulnerability in src/ui/views/objectBrowser.ts. The component stores Object Browser downloads and edit-save flow content in the shared /tmp directory without reliable cleanup, which may allow other local accounts...
CVE-2026-49484 Code for IBM i: Temporary files are visible to all users
Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where...
CVE-2026-49483
The Code for IBMi Visual Studio Code extension (prior to version 3.0.1 ) is vulnerable to arbitrary code execution due to a blind check in how it accepts IBMiComponent components. The extension fails to reliably verify component integrity, checking only for the existence of a procedure. This allo...
CVE-2026-49483 Code for IBMi: Uses IBM i components with blind check allowing arbitrary code execution
Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were accepted after checking that a procedure existed without reliably verifying component integrity. Components installed...
CVE-2026-49483 Code for IBMi: Uses IBM i components with blind check allowing arbitrary code execution
Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were accepted after checking that a procedure existed without reliably verifying component integrity. Components installed...
CVE-2021-3560
CVE-2021-3560 - Polkit Local Privilege Escalation ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author @UNICORDev by @NicPWNs and @Dev-Yeoj Description It was found that polkit could be tricked into bypassing the...
CVE-2026-43499-OnePlus15
CVE-2026-43499 — OnePlus 15 LPE Educational PoC WARNING: This repository is provided for educational and research purposes only. No pre-built binaries or releases are distributed. You must build everything from source. Android 16 local privilege escalation for OnePlus 15. Fork of...
CVE-2026-43499
👻 CVE-2026-43499 — GhostLock 15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros GhostLock is a high-severity Use-After-Free UAF vulnerability in the Linux Kernel rtmutex subsystem. The flaw originates from incorrect waiter cleanup during Priority Inheritance PI...
CVE-2026-109556 EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC
EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable. Attackers with script execution in a renderer, such as via template-preview or drag-preview...
CVE-2026-109556 EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC
EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable. Attackers with script execution in a renderer, such as via template-preview or drag-preview...
zygote-CVE-2024-31317
Zygote Toolkit - CVE-2024-31317 This is a toolkit that uses CVE-2024-31317 to extract private app data via ADB or spawn a shell with an app's UID. This vulnerability affects Android versions from 9 to 14 running on security patch level 2024-06-01 or lower. A support matrix of tested devices can b...
CVE-2023-34598
CVE-2023-34598 - Gibbon v25.0.0 LFI Exploit This repository contains a Python script that helps identify and exploit a local file inclusion LFI vulnerability CVE-2023-34598 in Gibbon v25.0.0. The script can scan a target website for potential vulnerability and, if successful, download the SQL dum...
CVE-2026-22009-Linux-eBPF-Map-Locking-Race-Use-After-Free
CVE-2026-22009 – Linux eBPF Map Locking Race → Use‑After‑Free Program Code C simulation // ebpfmapuaf.c - Simulated concurrent map update/free include include include include void mapdata = NULL; int mapfreed = 0; void updatemapvoid arg // Simulate eBPF program updating map if !mapfreed char...
CVE-2026-31635
🩸 CVE-2026-31635 – DirtyDecrypt Linux Kernel Local Privilege Escalation via RXGK Page Cache Corruption "DirtyDecrypt" — Part of the 2026 "Dirty" family exploits 📖 Overview DirtyDecrypt CVE-2026-31635 is a local privilege escalation vulnerability in the Linux kernel's rxrpc subsystem specifically...
copy-fail-mcp
Copy Fail MCP 📖 Installation Guide — quick start, manual setup, and troubleshooting CVE-2026-31431 — The worst Linux vulnerability ever discovered. Now controllable via MCP. 732 bytes of Python. No compilation. No race condition. No per-distro offsets. One shot, universal root on every Linux kern...
CVE-2026-50343-InstallService-EoP
CVE-2026-50343: InstallService StaticPluginMap EoP Standard User to SYSTEM I independently discovered and reported the vulnerability now tracked as CVE-2026-50343. MSRC confirmed my submission as a duplicate of an earlier report from another researcher. A standard interactive user can write...
