CVE-2026-98344

A flaw was found in the Linux kernel's DMA Direct Memory Access engine subsystem. This vulnerability can lead to a Denial of Service DoS when a local user triggers concurrent channel acquisition and release operations. Because the dmachanput function unconditionally decrements device reference...

CVE-2020-10977.py

CVE-2020-10977.py authenticated arbitrary file read for Gitlab CVE-2020-10977 usage: CVE-2020-10977.py -h --verifySSL -f FILELIST host token Exploit for the gitlab local file inclusion arbitrary authenticated file read - CVE-2020-10977. modify the variable pullfiles to include all the files you...

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP Local Privilege Escalation Windows 📌 Overview CVE-2020-11107 is a Local Privilege Escalation LPE vulnerability affecting Apache Friends XAMPP on Windows. An unprivileged user can modify the XAMPP Control Panel configuration file xampp-control.ini and replace the default...

OHTS

OHTS Microsoft Windows - 'afd.sys' Local Kernel Privilege Escalation Exploit Report CVE-2011-1249...

CVE-2019-1064

CVE-2019-1064 - AppXSVC Local Privilege Escalation https://www.rythmstick.net/posts/cve-2019-1064/...

cve-2021-3156

sudo Heap Overflow Vulnerability CVE-2021-3156 Vulnerability Overview A foreign research team discovered a sudo heap overflow vulnerability CVE-2021-3156, which had been hidden for a decade. An ordinary user can exploit this vulnerability to gain root privileges on a sudo host with default...

CVE-2019-10149-Exim4-RCE

Cr.Exim 4.87 - 4.91 - Local Privilege Escalation Cr.Link: https://www.exploit-db.com/exploits/46996 1.This method requires you to first access the target machine with standard user privileges. 2.Once you have accessed the target machine, create a script file with the following content: vi raptor....

aziot-cctv-cve-2025-50777

aziot-cctv-cve-2025-50777 CVE-2025-50777: Root Access and Plaintext Credential Exposure in AZIOT Smart CCTV Summary A local access control vulnerability CVE-2025-50777 has been identified in the firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera Firmware Version V1.00.02. Thi...

zimbramail-CVE-2025-68645-poc

zimbramail-CVE-2025-68645-poc A proof-of-concept exploiting a Local File Inclusion LFI vulnerability existing in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. Vulnerability The...

CVE-2026-16475-PoC

CVE-2026-16475 - OCSinventory LFI PoC Local File Inclusion vulnerability in OCSinventory 2.12.4 Vulnerability Details CVE ID: CVE-2026-16475 CVSS Score: 6.9 Medium CWE: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program Affected Version: OCSinventory 2.12.4 Status:...

CVE-2024-48990

CVE-2024-48990 Exploit Local Privilege Escalation in needrestart 3.8 via PYTHONPATH injection. How It Works 1. needrestart runs as root and scans all processes 2. Finds our Python process, reads PYTHONPATH=/tmp/.m from /proc/pid/environ 3. Executes Python as root with our malicious PYTHONPATH 4...

CVE-2021-34527

CVE-2021-34527 CVE-2021-34527 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution capability, and a C rendition for local privilege escalation. I had not se...

tgscope

tgscope Telegram OSINT, scraping and archival. A local web app that runs entirely on your machine and talks only to Telegram. npm install npm start Then open http://127.0.0.1:5173. The first run walks you through API credentials, a QR sign-in and loading your dialogs. Telegram is the only server ...

CVE-2017-9606

CVE-2017-9606 Due to insufficient of checking integrity, authenticity and low user rights on update folder local user can craft fake ViPNet update files with arbitrary execution code and place them in ViPNet update folder. After placing fake update files in ViPNet update folder, ViPNet update...

Safenet_SAC_CVE-2021-42056

Safenet Authentication Client Privilege Escalation CVE-2021-42056 Based on Thales' website 1, SafeNet Authentication Client – is a middleware client that manages Thales' extensive SafeNet portfolio of certificate-based authenticators, including eTokens, SafeNet IDPrime smart cards, USB and...

polkadots

polkadots CVE-2021-3560 Local PrivEsc Exploit This exploit creates a new privileged user with which you can escalate to root. Affected Distributions: RHEL 8 Fedora 21 Debian testing Bullseye Ubuntu 20.04 Usage ./polkadots -a Account -n Account name -h Password hash -i iterations Generate hashed...

CVE-2023-45612-PoC

CVE-2023-45612 PoC This repository contains a proof of concept PoC for CVE-2023-45612 which allowed XXE in the default configuration of ContentNegotiation in ktor. The PoC is split into 2 parts: server/, containing an example of a Ktor server using an affected version of Ktor, with an endpoint...

CVE-2021-41277

CVE-2021-41277 Uso 1. mostrar información de ayuda /CVE-2021-41277 ❯ go run main.go -h Usage of main: -f string File containing list of targets to verfity -o string File to write output to optional -s Show VulnInfo output -t int Number of concurrent goroutines for resolving default 10 -u string...

CVE-2024-3806

CVE-2024-3806 Porto = 7.1.0 - Unauthenticated Local File Inclusion via portoajaxposts Description The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'portoajaxposts' function. This makes it possible for unauthenticated attackers...

CVE-2026-98334

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When starting a wireless Access Point AP fails after setting beacon parameters, the kernel does not properly reset its internal state. A local attacker can exploit this condition by triggering subsequent scanning operations on th...