294678 matches found
CVE-Writeups
CVE-Writeups Security vulnerability research writeups. CVE-2026-50402: Windows NTFS Elevation of Privilege CVSS 7.8...
CVE-2025-1661
CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...
printix-CVE-2022-29553
CVE-2022-29553 Simple Release | Print Friendly A "Exposed Dangerous Method or Function" or "Use of Hard-coded, Security-relevant Constants" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attack...
GameOverlayFS
This script exploit the CVE-2023-2640 and CVE-2023-32629 for vulnerability on OverlayFS that affected some versions of Ubuntu. Tested on Ubuntu 20.04 with kernel 5.4.0. How to Use Download the file Gameoverlay.sh and, using a regular user not root, change the permissions for execution: chmod +x...
CVE-2025-32463
🚨 PoC: CVE-2025-32463 – Sudo chroot Escape Vulnerability A critical vulnerability affecting sudo versions 1.9.0 to 1.9.17p1 , allowing users to escape from chroot and gain access to the real root filesystem. 📌 Description CVE-2025-32463 is a local privilege escalation vulnerability in sudo that...
Blackash-CVE-2025-32463
CVE-2025-32463 Local Privilege Escalation to Root via Sudo chroot in Linux 🛑 Here's a summary of CVE-2025-32463 without links: 🔍 Vulnerability Overview CVE-2025-32463 is a local privilege escalation vulnerability in Sudo versions 1.9.14 through 1.9.17. It abuses the --chroot -R option by...
CVE-2026-89121
SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not...
CVE-2026-108943
A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...
CVE-2026-108944
A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...
CVE-2026-108945
A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...
CVE-2023-45184
CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Local server broken access control. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions for storing temporary password...
EUVD-2026-98206
A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loadckpt of the file torchdistill/common/mainutil.py. Executing a manipulation of the argument srcckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...
CVE-2026-108947
A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loadckpt of the file torchdistill/common/mainutil.py. Executing a manipulation of the argument srcckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...
CVE-2026-108947 yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization
A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loadckpt of the file torchdistill/common/mainutil.py. Executing a manipulation of the argument srcckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...
CVE-2026-108947 yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization
A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loadckpt of the file torchdistill/common/mainutil.py. Executing a manipulation of the argument srcckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...
CVE-2026-108947
A deserialization vulnerability exists in yoshitomo-matsubara torchdistill versions up to 1.1.5 . The flaw is located within the load_ckpt function in the torchdistill/common/main_util.py file. An attacker can trigger deserialization by manipulating the src_ckpt argument. This attack requires loc...
CVE-2021-24084
WindowsMDMLPE Demo : https://youtu.be/o5PyVhj3eMw https://blog.0patch.com/2021/11/micropatching-unpatched-local-privilege.html...
CVE-2025-27591-Below
CVE-2025-27591-Below 📌 Description This is a proof-of-concept PoC exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below system monitor tool. The issue arises from unsafe handling of log files /var/log/below/errorroot.log when executed with elevated privileges. By...
CVE-2021-41773
CVE-2021-41773 scanner This script tests for the path traversal and local file inclusion vulnerability in Apache version 2.4.29, this script doesn't return local files, it merely scans the web server and tells you if it's vulnerable or not. Usage: python3 cve-2021-41773-scanner.py IPv4 address...