CVE-2026-43499-pmg110-root

pmg110-root CVE-2026-43499 use-after-free de rtmutexwaiter en futex PI, escalada de privilegios local, portada al OPPO PMG110 / K15 Pro+ — MediaTek MT6991, ColorOS 16. Un solo archivo enviado, ejecutado mediante LDPRELOAD: root@kitploit: adb push out/preload-pmg110-16.0.9.400.so...

Linux Distros Unpatched Vulnerability : CVE-2026-92768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext...

EulerOS Virtualization 2.10.1 : cifs-utils (EulerOS-SA-2026-3829)

According to the versions of the cifs-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looki...

UBUNTU-CVE-2026-91202

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory,...

Linux Distros Unpatched Vulnerability : CVE-2026-91202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and the...

CVE-2026-79079

An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components...

ROS-20260921-73-0108

The vulnerability in golang-github-rancher-local-path-provisioner is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to increase their privileges...

SUSE SLES15 Security Update : NetworkManager (SUSE-SU-2026:4063-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4063-1 advisory. - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user...

UBUNTU-CVE-2026-63451

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, a locally supplied detection rule that combines frame inspection without content and a transformed match without content can make...

Linux Distros Unpatched Vulnerability : CVE-2026-91203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged fi...

CVE-2026-78806

CVE-2026-78806 affects the Matter Project CHIP v1.5.1 (Matter Standard Specification-Implementation gap), specifically the PerformCommissioningStep function in the ChipDeviceController.cpp component. The flaw allows a local attacker to obtain sensitive information during the commissioning process...

UBUNTU-CVE-2026-92745

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...

UBUNTU-CVE-2026-92768

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

CVE-2022-37705

Suggested description A privilege escalation flaw was found on Amanda 3.5.1 that can take backup user to root privileges. The vulnerable component is the runtar SUID that is just a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. The program does not chec...

CVE-2017-14187_PoC_ARMv7

PoC de CVE-2017-14187 Prueba de concepto de escalada de privilegios local para FortiOS 5.6.0 a 5.6.2, 5.4.0 a 5.4.8, y por debajo de 5.2 Desencadenado por fnsysctl y USB por lo que se requiere acceso físico. Este PoC genera un shell root local explotando CVE-2017-14187. Informe Coreano Inglés TL;...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...

Copy-Fail-CVE-2026-31431-Lab

Copy Fail CVE-2026-31431 — Exploit Reproduction & Detection Lab This repository documents the end-to-end reproduction, detection engineering, and incident response for CVE-2026-31431 "Copy Fail" , a critical Linux kernel local privilege escalation vulnerability affecting kernels 4.14 through...

ghostlock-aak-apk

GhostLock AAK Launcher CVE-2026-43499 · Linux kernel rtmutex stack Use-After-Free 本地提权（LPE）加载器/触发器 本仓库是一个安全研究与漏洞验证（PoC）项目 ，用于在受控测试环境 中演示、验证 CVE-2026-43499（GhostLock）漏洞的触发流程。 项目简介 这是一个配合外部 preload.so 使用的 Android 应用（APK）「加载器/触发器」。 目标漏洞 ：CVE-2026-43499（Linux kernel kernel/locking/rtmutex.c，stack UAF...

CVE-2020-1938

CVE-2020-1938 Esta CVE-2020-1938 corrige errores del PoC de https://github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat.git y se ha verificado su funcionamiento en Apache Tomcat/8.0.43. Método de práctica 1. Crear docker-compose.yml 2. docker compose up -d 3. python3...

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

Informe de análisis de la vulnerabilidad CVE-2025-14502 Resumen de la vulnerabilidad Tipo de vulnerabilidad : Inclusión Local de Archivos Local File Inclusion, LFI Versiones afectadas : News and Blog Designer Bundle 1.1 y todas las versiones anteriores Severidad : Alta Complejidad del ataque : Ba...