CVE-2025-4631

🚨 CVE-2025-4631 - Profitori WordPress Plugin Privilege Escalation Exploit 📌 Vulnerability Summary Profitori Plugin versions 2.0.6.0 to 2.1.1.3 is vulnerable to unauthenticated privilege escalation due to a missing capability check in the /wp-json/stocktend/v1/stocktendobject endpoint. This allows...

CVE-2022-35841

CVE-2022-35841 This is only a small writeup with the theory, as this bug was collided on and I never did get around to properly testing this. EnterpriseAppMgmtSvc is an interesting service implementing COM objects. Seems to date from Windows Phone and indeed, most of the COM interfaces implemente...

CVE-2026-0092

CVE-2026-0092 En Package Manager, existe una posible omisión del controlador de bloqueo del dispositivo debido a una verificación de permisos faltante. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita interacción del usuar...

CVE-2026-0047-poc

CVE-2026-0047: Falta de comprobación de permisos en ActivityManagerService Un montón de mapas de bits robados de cada aplicación en ejecución — cero permisos, cero interacción del usuario. La falta de la comprobación enforceCallingOrSelfPermissionDUMP en ActivityManagerService.dumpBitmapsProto...

CVE-2023-26083

CVE-2023-26083 – Fuga de direcciones del kernel de Mali GPU a través de Timeline Stream Este repositorio contiene una prueba de concepto PoC del exploit para CVE-2023-26083 , una vulnerabilidad en el controlador de GPU Mali Arm Mali GPU Kernel Driver que permite a un usuario sin privilegios filtr...

CVE-2023-33477

CVE-2023-33477 Harmonic NSG 9000-6G modulator has an unauthorized download vulnerability in the config.exp configuration file Due to the lack of access permission verification for the "cgi.bin/config.exp" file in this model modulator, any user may request to download a configuration file while...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - Creación Arbitraria de Archivos sin Autenticación Descripción: El plugin Debug Tool para WordPress es vulnerable a la creación arbitraria de archivos debido a una falta de verificación de capacidades en la función dbtpullimage y a la falta de validación del tipo ...

CVE-2024-4875

CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - Falta de Autorización para Actualización de Opciones Descripción: El plugin HT Mega – Absolute Addons For Elementor para WordPress es vulnerable a la modificación no autorizada de datos o pérdida de datos debido a la falta de...

DEBIAN-CVE-2026-90227

In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl: check SUBMITIO with nvmecmdallowed Unlike IOCMD / IO64CMD, NVMEIOCTLSUBMITIO never calls nvmecmdallowed. Unprivileged callers can thus issue I/O on a partition device or write through a read-only file descriptor. Pass...

EUVD-2026-80079

@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources via contextBridge without requiring an active getDisplayMedia picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sources IPC route to retrieve desktop...

CVE-2026-18426

Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF token validation. Because the token is bound to the user and action rather than to a specific block, page, or form, an...

EUVD-2026-79942

Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF token validation. Because the token is bound to the user and action rather than to a specific block, page, or form, an...

CVE-2026-58726

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57012

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56970

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0179

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58726

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79010

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78992

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...