CVE-2026-78675

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-72696

Grav CMS versions before 2.0.16 are affected by a symlink following vulnerability in the Scheduler Job::createLockFile() method. The root cause is that lock file paths are predictable and reside in a world-writable temp directory , allowing a local attacker to pre-create a symlink at the expected...

CVE-2026-72696 Grav CMS before 2.0.16 Symlink Following via createLockFile

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

EUVD-2026-65210

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

CVE-2026-72696 Grav CMS before 2.0.16 Symlink Following via createLockFile

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 e CVE-2023-32629 GameOverLay - PoC per l'Escape Root sul Sistema Host Reale Una Proof of Concept PoC interattiva e a più fasi per l'Escalation dei Privilegi Locali LPE che mira alle vulnerabilità OverlayFS del kernel Linux Ubuntu CVE-2023-2640 / CVE-2023-32629. A differenza dei soli...

CVE-2008-6827

CVE-2008-6827 Symantec Altiris Client Service 6.8.378 - Escalation dei privilegi locale Pubblicazione Exploit-DB: https://www.exploit-db.com/exploits/5625/ Autore Alex Hernandez alias @alt3kx...

CVE-2023-45184

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Lokaler Server mit defekter Zugriffskontrolle. Zeitplan Schwachstelle an den Hersteller gemeldet: 22.09.2023 Neue behobene Version 1.1.9.4 veröffentlicht: 08.12.2023 Öffentliche Offenlegung: 15.12.2023 Beschreibung IBM i Access Client Solutio...

CVE-2024-26475

CVE-2024-26475 Autori Sherlock Fang, Vlad Tronciu, Ayam Babu Descrizione Un problema in radareorg radare2 v.0.9.7 fino alla v.5.8.6, risolto nella v.5.8.8, consente a un attaccante locale di causare un denial of service tramite la funzione grubsfsreadextent. Vettori di attacco Creare un payload p...

EUVD-2026-65165

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

Fonoster-LFI-PoC

CVE-2024-43035 - Fonoster LFI Prova di concetto Questo repository contiene uno script di prova di concetto PoC che dimostra una vulnerabilità di Local File Inclusion in Fonoster. Questo strumento è destinato esclusivamente a scopi educativi e di test autorizzati. Utilizzo Leggere un file locale P...

CVE-2021-3560

CVE-2021-3560 Privilegienerhöhung durch Race Condition in polkit. Beschreibung der Schwachstelle CVE-2021-3560 ist eine Race Condition in polkit, die es einem nicht authentifizierten lokalen Benutzer ermöglicht, Root-Rechte zu erlangen. Die Schwachstelle besteht in der Art und Weise, wie polkit...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Escalata di Privilegi con Dirty Cow CVE-2016-5195 Autore: Samuel García Accademia: 4Geeks Academy Data: 25/06/2025 Descrizione Dirty COW è una vulnerabilità critica del kernel Linux ≤ 4.8.3 che permette a un attaccante locale di modificare file di sola lettura tramite una condizione di gara race...

CVE-2025-32463_Sudo_PoC

CVE-2025-32463SudoPoC PoC für CVE-2025-32463: Lokale Privilegieneskalation in sudo via --chroot. Exploitiert NSS-Modul-Injektion durch manipulierte chroot-Umgebungen. Konzipiert für Sicherheitsforscher und Laborumgebungen. CVE-2025-32463 - Lokale Privilegieneskalation via sudo --chroot Ein...

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal Scanner LFI proof-of-concept: rilevamento automatico delle esposizioni di /etc/passwd tramite directory traversal e corrispondenza regex. root@kitploit: Scanner LFI Un proof-of-concept Python leggero per scansionare host target per vulnerabilità di Local...

rwsploit

Oracle Reports rwservlet स्कैनर ⚠️ केवल अधिकृत उपयोग के लिए। इस टूल को केवल उन सिस्टमों पर चलाएँ जिनके स्वामी आप हैं या जिनके परीक्षण के लिए आपके पास स्पष्ट लिखित अनुमति है। अनधिकृत उपयोग अवैध है। Oracle Reports Server rwservlet के लिए एक केंद्रित शोषण स्कैनर जो CVE-2012-3152 और CVE-2012-3153 को...

PT-2026-81860

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

PT-2026-81395

Name of the Vulnerable Software and Affected Versions Kaltura HTML5 player mwEmbed / html5lib versions 2.x and earlier Description A local file disclosure issue exists due to improper validation of the ServiceUrl parameter in the 'mwEmbedLoader.php' endpoint. This parameter, intended as the base...

UBUNTU-CVE-2026-63312

NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open directly instead of pathsec.open. Attackers who control the fileid argument can read arbitrary local files regardless of the ENFORCE setting,...

UBUNTU-CVE-2026-70626

NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open that allows local attackers to read arbitrary files outside the corpus root. The vulnerability exists because path validation is lexical and does not account for symlink resolution, enabling attackers to place...