CVE-2026-61749

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, privileged staff users who can author report or label templates can cause WeasyPrint report rendering to retrieve attacker-selected resources through the HTTP and HTTPS URL schemes or the local file URI scheme. The...

CVE-2026-49810

Dell Command Powershell Provider DCPP, versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

dirtyclone-CVE-2026-43503

CVE-2026-43503 — DirtyClone Linux local privilege escalation. A cloned skbuff loses the SKBFLSHAREDFRAG flag, so ESP in-place decryption writes into file-backed page-cache memory. The PoC patches /etc/passwd in cache to inject a uid-0 account and gives a root shell. Disk is never modified. Fixed ...

CVE-2025-7771-Vulnerability-Exploration

🔓 ThrottleStop.sys Kernel Exploit — HVCI-Compatible Physical Memory Mapper CVE-2025-7771 — Arbitrary Physical Memory Read/Write via ThrottleStop.sys IOCTLs ⚠️ Disclaimer This project is published for educational and research purposes only. The goal is to demonstrate how a signed, trusted kernel...

CVE-2025-8110

CVE-2025-8110 Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. How does this detection method work? Extracts the Gogs version from the footer of /user/login via regex Gogs Version: X.X.X and flags instances running version 0.13.3 or earlier as...

CVE-2025-54236

Adobe Magento SessionReaper LFI PoC Una simple prueba de concepto en Python que demuestra la vulnerabilidad CVE-2025-54236 SessionReaper que afecta a versiones vulnerables de Adobe Magento. Solo con fines educativos y pruebas de seguridad autorizadas. Características Normalización automática de U...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / local file read via response URL CVE-2026-13233 Untrusted upstream: the provider that fetched the URL its response told it to. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Coordinated disclosure complete...

CVE-2025-11371

CVE-2025-11371 In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet...

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - Inclusión de Archivos Locales Description : El Customer Support System 1.0 es vulnerable a la Inclusión de Archivos Locales. Un usuario autenticado tiene la capacidad de acceder y leer archivos PHP del sistema operativo explotando una vulnerabilidad de...

CVE-2021-21551

Exploit CVE-2021-21551 for LPE by creating System cmd Tested on Windows 11 21H2 22000.1335...

CVE-2022-21392

CVE-2022-21392: Local Privilege Escalation via NMR SUID in Oracle Enterprise Manager In Oracle installations, where the “nmr” binary is present and SUID-ed as “root”, due to insecure directory permissions, the “oracle” user can elevate his/her privileges to that of the “root” user by replacing th...

winmagic_sd

Informe técnico sobre CVE-2020-11519 y CVE-2020-11520 Fecha: Junio de 2020 Autor: Dennis Elser código: github Tabla de Contenidos Introducción Enfoque y Descripción Técnica CVE-2020-11519 CVE-2020-11520 Explotación de Prueba de Concepto Cronología de Divulgación Solución Sumas de Verificación...

evil-rmi-server

evil-rmi-server Un servidor RMI malicioso que puede lanzar un comando arbitrario. Puede ser útil para CVE-2021-44228 en un escenario local de escalada de privilegios. Construcción ./gradlew bootJar Ejecución root@kitploit: Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar -hV -p= An evil...

CVE-2026-57239

Foxit PDF Reader LPE Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. Build Just build the binary, drop it on your target and run it. root@kitploit: cargo build --release Usage Th...

OverlayFS---CVE-2021-3493

En resumen Descubre cómo una vulnerabilidad en OverlayFS permite a usuarios locales en Ubuntu obtener privilegios de root. Resumen de la vulnerabilidad Un problema específico de Ubuntu en el sistema de archivos overlayfs del kernel de Linux donde no validaba correctamente la aplicación de las...

throttlestop-exploit-rw

Physical Memory Mapper Research tool demonstrating physical memory access through virtual-to-physical address translation combined with vulnerable driver exploitation. Overview This project explores low-level Windows memory management by combining the superfetch technique for address translation...

EUVD-2026-84053

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, privileged staff users who can author report or label templates can cause WeasyPrint report rendering to retrieve attacker-selected resources through the HTTP and HTTPS URL schemes or the local file URI scheme. The...

CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

CVE-2026-82165

Dell Command | Integration Suite for System Center , versions prior to 6.7.2 , contains an Incorrect Default Permissions vulnerability. A low-privileged attacker with local access could exploit it to achieve Information Disclosure . The CVSS v3.1 base score is 5.5 (Medium) with a local attack vec...

CVE-2026-82165

Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...