EUVD-2026-67143

The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster through 0.22.7 invokes the gRPC callback with PERMISSIONDENIED when createIsWorkspaceMember reports that the caller is not a member of the target workspace, but it does not return. Execution continues...

CVE-2022-35841

CVE-2022-35841 Esta é apenas uma pequena descrição com a teoria, já que este bug foi colidido e nunca cheguei a testá-lo adequadamente. EnterpriseAppMgmtSvc é um serviço interessante que implementa objetos COM. Parece datar do Windows Phone e, de fato, a maioria das interfaces COM implementadas p...

nifi-CVE-2026-39816-poc

Apache NiFi CVE-2026-39816 POC Demonstração de prova de conceito para CVE-2026-39816, uma bypass da permissão EXECUTECODE no Apache NiFi 2.8.0 que permite que um designer de fluxo que teve os privilégios de execução de código deliberadamente negados execute Groovy arbitrário na JVM do NiFi por me...

CVE-2026-0092

CVE-2026-0092 No Package Manager, há uma possível bypass do controlador de bloqueio do dispositivo devido à ausência de uma verificação de permissão. Isso pode levar à escalada local de privilégios sem que sejam necessários privilégios de execução adicionais. A interação do usuário não é necessár...

CVE-2026-0047-poc

CVE-2026-0047: Ausência de verificação de permissão no ActivityManagerService Um monte de bitmaps roubados de todos os aplicativos em execução — zero permissões, zero interação do usuário. A ausência de uma verificação enforceCallingOrSelfPermissionDUMP em ActivityManagerService.dumpBitmapsProto...

CVE-2023-26083

CVE-2023-26083 – Vazamento de endereço do kernel da GPU Mali via Timeline Stream Este repositório contém uma prova de conceito PoC para a CVE-2023-26083 , uma vulnerabilidade no driver da GPU Mali Arm Mali GPU Kernel Driver que permite a um usuário não privilegiado vazar ponteiros do kernel e...

CVE-2023-33246

CVE-2023-33246 - RocketMQ 远程代码执行 CVE-2023-33246 - Apache RocketMQ 配置远程代码执行漏洞 概述 RocketMQ 是一个分布式消息流平台。 RocketMQ 5.1.0 及以下版本存在任意代码注入漏洞。RocketMQ 的 Broker 组件暴露在外部网络，且缺乏权限验证。攻击者可以利用此漏洞，通过更新配置功能以运行 RocketMQ 的系统用户身份执行命令。此外，攻击者还可以通过伪造 RocketMQ 协议内容达到同样效果。 检测 RocketMQ 版本以识别漏洞 root@kitploit: usage: check.p...

CVE-2026-77507

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, Weblate's object-scoped RSS feeds do not apply the permission checks used elsewhere, allowing unauthorized users to read change-history metadata from private projects and...

CVE-2024-4875

CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - Autorizzazione mancante per l'aggiornamento delle opzioni Descrizione: Il plugin HT Mega – Absolute Addons For Elementor per WordPress è vulnerabile alla modifica non autorizzata dei dati|perdita di dati a causa di una mancata verifi...

CVE-2026-74676

A flaw was found in the Linux kernel. A missing permission check in the KDSKBMETA ioctl input/output control allows a local process to modify the keyboard meta mode on a non-controlling console without proper authorization. This could enable an attacker to make unauthorized changes to system...

CVE-2023-33477

CVE-2023-33477 Der Harmonic NSG 9000-6G-Modulator weist eine Schwachstelle für unbefugte Downloads in der Konfigurationsdatei config.exp auf Aufgrund der fehlenden Zugriffsberechtigungsprüfung für die Datei „cgi.bin/config.exp" in diesem Modulatormodell kann jeder Benutzer bei einer Fernverbindun...

CVE-2023-47179

CVE-2023-47179 WooODT Lite = 2.4.6 - Fehlende Autorisierung zur willkürlichen Optionsaktualisierung Abonnent+ Beschreibung: Das WooODT Lite Plugin für WordPress ist anfällig für unbefugte Datenänderungen aufgrund einer fehlenden Berechtigungsprüfung in der Funktion...

CVE-2025-4631

🚨 CVE-2025-4631 - Profitori WordPress प्लगइन विशेषाधिकार वृद्धि शोषण 📌 भेद्यता सारांश Profitori प्लगइन संस्करण 2.0.6.0 से 2.1.1.3 /wp-json/stocktend/v1/stocktendobject एंडपॉइंट में क्षमता जाँच की कमी के कारण अप्रमाणित विशेषाधिकार वृद्धि के लिए असुरक्षित है। यह दूरस्थ हमलावरों को wpcapabilities मे...

velociraptor_CVE-2025-6264_PoC

CVE-2025-6264 HAFTUNGSAUSSCHLUSS: Dies ist ein Forschungsprojekt zu Bildungszwecken. Ich habe diese Schwachstelle nicht entdeckt. Dieses Repository demonstriert CVE-2025-6264 zu Lernzwecken Betroffene Versionen vor 0.74.3 Betrifft Windows, MacOS und Linux Dem Artefakt...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - Nicht authentifizierte beliebige Dateierstellung Beschreibung: Das Debug Tool Plugin für WordPress ist anfällig für die Erstellung beliebiger Dateien aufgrund einer fehlenden Berechtigungsprüfung in der Funktion dbtpullimage und einer fehlenden Dateityp-Validieru...

CVE-2026-74676

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...

CVE-2026-74676

CVE-2026-74676 affects the Linux kernel virtual terminal (VT) subsystem. The KDSKBMETA ioctl, which modifies keyboard meta mode, lacked the !perm permission check enforced by all other keyboard setter ioctls in vt_k_ioctl() . This allowed a process to change the meta mode on a non-controlling con...

EUVD-2026-64363

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...

CVE-2026-74676 vt: add permission check for KDSKBMETA ioctl

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...

CVE-2026-74676 vt: add permission check for KDSKBMETA ioctl

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...