EUVD-2026-88756

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

CVE-2026-102437

The esengine DeepSeek-Reasonix (Reasonix Studio) desktop application contains an OS Command Injection vulnerability in the internal/gitcmd component. The root cause is the improper neutralization of special elements during the invocation of git diff filter.clean/smudge . A local attacker who can ...

CVE-2026-73598

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-73598

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this flaw to achieve Elevation of privileges . No specific ex...

CVE-2026-73598

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-88749

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

使用 Dirty Cow 内核漏洞进行权限提升 本项目旨在通过实践演示 Dirty COW（CVE-2016-5195）漏洞的运行机制，这是 Linux 内核中一个关键漏洞。它模拟了一个真实的攻击场景：攻击者仅拥有受限的本地访问权限，却能利用未打补丁的系统，将权限提升至完全 root 访问权限。...

CVE-2026-31431-Copy-Fail---Minified-LPE-PoC

CVE-2026-31431-CopyFail---Minified-LPE-PoC ⚠️ 免责声明 仅供教育和授权的安全测试使用。 本概念验证（PoC）是为了授权的红队演练和漏洞审计而综合编写的。作者和贡献者不对滥用此代码承担任何责任。请勿对不属于您或未经明确书面许可的系统使用此漏洞利用程序。 📝 概述 CVE-2026-31431（俗称“Copy Fail”）是 Linux 内核加密 API（AFALG）中的一个本地权限提升（LPE）漏洞。通过将 AFALG 套接字与 splice 系统调用结合使用，非特权用户可以强制内核将任意字节直接写入只读文件的内存页缓存中。...

CVE-2025-49132

CVE-2025-49132 - Pterodactyl控制面板漏洞利用工具 ⚠️ 免责声明 : 本仓库仅用于教育和研究目的 ，是我安全研究的一部分，旨在理解和记录 CVE-2025-49132。漏洞发现的所有功劳归原作者。 / |\ \ / /| | | / | | | | || | / | || / | | \ V / | || / / | |/ / | | | | , /| || \ / / | / || /| //||/ || // ||/ /| Pterodactyl控制面板 - 未经认证的LFI到RCE漏洞利用 📋 描述 CVE-2025-49132 是...

cve-2025-32463

CVE-2025-32463-sudo-chwoot CVE-2025-32463 - Sudo chroot 权限提升漏洞的 PoC 原始 PoC sudo-chwoot.sh CTF 演示 chwoot-demo.c 文档 技术分析：https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot 安全公告：https://www.sudo.ws/security/advisories/chrootbug/ 其他 PoC ⚠️ 警告 ：这些 PoC 尚未经过验证。风险自负 Docker 化版本...

EUVD-2026-88734

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism...

CVE-2026-73593

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism...

CVE-2026-73593

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Active Debug Code vulnerability. A high privileged attacker with local access could exploit this flaw to cause Information disclosure , Information tampering , Protection mechanism bypass , and Unau...

CVE-2026-73593

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism...

CVE-2025-27591

Below - 本地权限提升 CVE-2025-27591 Below .log 符号链接到任何 root 拥有的文件，例如 /etc/passwd。 当使用 sudo 执行 below snapshot 时，它会强制将日志文件的模式设置为 0666 并写入其中——即使它是一个符号链接。 这允许注入一个无密码的 root 特权用户，从而导致获得完全的 root shell 访问权限。 使用方法 git clone https://github.com/rvizx/CVE-2025-27591 cd CVE-2025-27591 chmod +x exploit.sh ./exploit....

CVE-2026-97420

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program modifies a system control sysctl parameter, the kernel fails to append a null-terminating byte to the replacement buffer. Downstream kernel parsers expecting a properly terminated string may read past...

CVE-2026-97418

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem within the ESS AudioDrive ES18xx sound card driver. During mixer initialization, the driver fails to verify whether memory allocation for sound control structures succeeds before dereferencing the returned...

CVE-2026-97591

A flaw was found in the Linux kernel's s390 crypto subsystem. When processing Protected Key HMAC PHMAC operations, the driver improperly treats busy queue status codes from the cryptographic engine as failure conditions. A local user could exploit this flaw by submitting cryptographic requests...

CVE-2026-82596

A flaw was found in LatencyUtils. A local attacker can exploit this vulnerability by performing a manipulation within the PauseDetector component, specifically affecting the LatencyStats.recordDetectedPause function. This can lead to memory corruption, potentially impacting the stability and...