CVE-2019-16784-POC

CVE-2019-16784 POC Este es mi POC para la vulnerabilidad de Windows PyInstaller versión 3.6 que existe para la opción --onefile. Un atacante podría lograr la ejecución de comandos y posiblemente LPE secuestrando una DLL importada por la DLL del intérprete de Python utilizada por el binario de...

CVE-2022-21371

CVE-2022-21371 Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Inclusión de Archivos Locales root@kitploit: Exploit Title: Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion Date: 25/1/2022 Exploit Author: Jonah Tan @picar0jsu...

CVE-2026-94129

A write-what-where vulnerability exists in the IOCTL Handler (function sub_1105C) of the BS_RVSIO64.sys driver within BioStar VALKYRIE AURORA 2.10.2411.0800 . Manipulating the PhysicalAddress argument allows an attacker with local access to write arbitrary data to arbitrary memory, resulting in a...

CVE-2025-64714-privatebin-2.0.2-PoC

CVE-2025-64714 — Inclusión Local de Archivos en PrivateBin mediante Path Traversal en la Cookie de Plantilla Severidad: Media CVSS v3.1: 5.8 Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Versiones afectadas: PrivateBin = 1.7.7 Versión parcheada: 2.0.3 CWE: CWE-23 Path Traversal Relativo, CWE-73...

CVE-2025-68645

🛡️ CVE-2025-68645 - Zimbra Local File Inclusion LFI Analysis 📌 Overview This document describes a Local File Inclusion LFI vulnerability affecting Zimbra Collaboration Suite. The issue arises from improper handling of the following parameter: root@kitploit: /h/?javax.servlet.include.servletpath=...

CVE-2026-94128 BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

2009

2009 Linux Kernel Exploits - CVE-2009-1185 + CVE-2009-1337 + CVE-2009-2692 + CVE-2009-2698 + CVE-2009-3547...

cve-2025-7771

CVE-2025-7771 — LPE con ThrottleStop.sys Prueba de concepto para CVE-2025-7771. ThrottleStop.sys expone dos manejadores IOCTL que permiten lectura/escritura arbitraria de memoria física sin control de acceso: cualquier proceso administrador puede leer o escribir en cualquier parte de la RAM físic...

kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

A flaw was found in the Linux kernel's RDMA/mana component. A local user could trigger a kernel corruption by providing specific configurations through the user Application Programming Interface uAPI that cause an internal error. This issue arises when Work Queues WQs are specified to share the...

kernel: memfd: deny writeable mappings when implying SEAL_WRITE

A flaw was found in the Linux kernel's memfd component. When the SEALEXEC flag is used to create a memory file descriptor, the SEALWRITE flag is implicitly applied to prevent writing to executable memory. However, this implicit write protection is applied after checks that should deny writable...

kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation

A flaw was found in the Linux kernel's userfaultfd mechanism. A local attacker with userfaultfd access could register on shadow stack Virtual Memory Areas VMAs. By discarding a page and injecting a page with chosen return addresses, an attacker could achieve arbitrary code execution. This...

CVE-2025-4524

CVE-2025-4524 WordPress Madara Theme 2.2.2.1 - Local File Inclusion...

CVE-2026-50656-rogueplanet-validation

Informe de validación del PoC RoguePlanet para Microsoft Defender Propósito y alcance del informe Este informe trata sobre la validación del PoC RoguePlanet descrito públicamente y relacionado con Microsoft Defender. La técnica descrita se presentó en los medios el 10 de junio de 2026 como una...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local privilege escalation exploiting CVE-2026-43499 — an rtmutex removewaiter bug that leaves a struct rtmutexwaiter dangling on the waiter's kernel stack kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapted from NebuSec/CyberMeowfia...

By-Poloss..-..CVE-2026-7515-PoC

CVE-2026-7515: BetterDocs Pro = 3.8.0 - Inclusión de Archivo Local No Autenticada Resumen...

CVE-2026-43499-pmg110-root

pmg110-root CVE-2026-43499 use-after-free de rtmutexwaiter en futex PI, escalada de privilegios local, portada al OPPO PMG110 / K15 Pro+ — MediaTek MT6991, ColorOS 16. Un solo archivo enviado, ejecutado mediante LDPRELOAD: root@kitploit: adb push out/preload-pmg110-16.0.9.400.so...

ROS-20260921-73-0108

The vulnerability in golang-github-rancher-local-path-provisioner is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to increase their privileges...

EulerOS Virtualization 2.10.1 : cifs-utils (EulerOS-SA-2026-3829)

According to the versions of the cifs-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looki...

SUSE SLES15 Security Update : NetworkManager (SUSE-SU-2026:4063-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4063-1 advisory. - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user...

Linux Distros Unpatched Vulnerability : CVE-2026-91202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and the...