CyberQRM

CyberQRM – Gestión Cuantitativa de Riesgos Cibernéticos Una plataforma local de código abierto para la evaluación cuantitativa de riesgos de ciberseguridad utilizando el marco FAIR v3.1 Factor Analysis of Information Risk. Modele amenazas, ejecute simulaciones Monte Carlo, mida la efectividad de...

CVE-2026-49810

Dell Command PowerShell Provider (DCPP) versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low-privileged attacker with local access can exploit this to achieve Information Disclosure . The Dell security advisory (DSA-2026-379) describes the issu...

CVE-2026-49810

Dell Command Powershell Provider DCPP, versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

EUVD-2026-84050

Dell Command Powershell Provider DCPP, versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2023-43354-CMSmadesimple-Stored-XSS---MicroTIny-extension

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Profiles in the Extensions - MicroTiny WYSIWYG editor. Attack Vectors: Scripting A vulnerability ...

CVE-2026-82163

Dell Command | Intel vPro Out of Band , versions prior to 4.7.2 , contains an Incorrect Default Permissions vulnerability. A low-privileged attacker with local access can exploit this to achieve Information Disclosure . The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, low compl...

CVE-2026-82163

Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2017-16651

CVE-2017-16651 Python implementation of Roundcube LFI CVE-2017-16651...

CVE-2026-33825

🔵 CVE-2026-33825 — “BlueHammer” 🔵 Escalada de Privilegios Local LPE de Microsoft Defender BlueHammer es una vulnerabilidad de Escalada de Privilegios Local de alta gravedad que afecta a componentes de Microsoft Defender en sistemas Windows. La falla permite a un atacante con pocos privilegios...

setcred

FreeBSD setcred2 — artefactos de investigación Este subdirectorio recopila el informe y los exploits funcionales para la vulnerabilidad de desbordamiento de búfer en la pila de setcred2 en el kernel de FreeBSD 14.x. La vulnerabilidad en sí está completamente documentada en setcred.txt. La versión...

HVCIPwned

CVE-2024-35250 Escalación de privilegios local mediante desreferencia de puntero no confiable en el controlador Windows Kernel Streaming ks.sys. Exploit solo de datos: omite la integridad de código protegida por hipervisor HVCI. Resumen Campo| Detalle ---|--- CVE| CVE-2024-35250 Componente| ks.sy...

CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Unauthenticated Local File Inclusion 📝 Description The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via the kubiohybridthemeloadtemplate function. This makes it possible for...

copyfail-guard

copyfail-guard Automated detection and mitigation tool for the vulnerability CVE-2026-31431 "Copy Fail", a local privilege escalation LPE in the algifaead module AFALG interface of the Linux kernel. ⚠️ Scope: this project is purely defensive. It does not contain, generate, or reference exploit...

CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" This repo is a bad Epoll validator for aarch64 kernels based on exploit already exists for x86. Linux Kernel Local Privilege Escalation viaepoll Use-After-Free Race Condition Field| Detail ---|--- CVE| CVE-2026-46242 Nickname| Bad Epoll Type| Use-After-Free UAF via ra...

CVE-2025-27591

CVE-2025-27591 descripción Básicamente, la herramienta below permite la modificación universal de su archivo de registro, lo que conduce a una escalada de privilegios como root. detalles. El archivo de registro creado por below es escribible por cualquier usuario, permitiendo a cualquier usuario...

CVE-2022-32250-LPE

CVE-2022-32250-LPE LPE exploit for CVE-2022-32250 - a Use-After-Free vulnerability in netfilter. My write-up of the vulnerability: Conquering a Use-After-Free in nftables: Detailed Analysis and Exploitation of CVE-2022-32250 Building Building requires libmnl and libnftnl. root@kitploit: gcc -lmnl...

hacker-profile

Instalar dependencias: root@kitploit: bundle install npm i Probar con servidor web local: root@kitploit: $ bundle exec middleman server Construir: root@kitploit: $ gulp build $ bundle exec middleman build...

yc-mk8s-sctphantom-mitigation

SCTPhantom Mitigation for Yandex Managed Kubernetes Automatic application of mitigation for the CVE-2026-64564 SCTPhantom vulnerability in the Linux kernel on all worker nodes of a Yandex Managed Kubernetes cluster. Vulnerability Description CVE identifier CVE ID: CVE-2026-64564 CVE link:...

CVE-2022-37706

CVE-2022-37706 Overview CVE-2022-37706 is a Local Privilege Escalation LPE vulnerability found in the enlightenmentsys component of the Enlightenment desktop environment for Linux. This vulnerability allows a local low-privileged user to escalate privileges to root on vulnerable systems. CVE ID:...

pagecache-lpe-containment-kit

Page-Cache LPE Containment Kit Detect, contain, and verify defenses against two Linux page-cache-corruption local privilege escalations — DirtyClone CVE-2026-43503 and pedit COW CVE-2026-46331 — on hosts and containers. This is an educational, defensive security kit. It explains how both...