Nagios-CVE-2019-15949-RCE

Nagios-CVE-2019-15949-RCE-Poc a python PoC for the CVE-2019-15949 Overview A vulnerability exists in Nagios XI = 5.6.5 allowing an attacker to leverage an RCE to escalate privileges to root. The exploit requires access to the server as the 'nagios' user, or CCM access via the web interface with...

nagiosxi-root-rce-exploit

nagiosxi-root-exploit Overview A vulnerability exists in Nagios XI = 5.6.5 allowing an attacker to leverage an RCE to escalate privileges to root. The exploit requires access to the server as the 'nagios' user, or CCM access via the web interface with perissions to manage plugins. Details The...

legion

Legion ZK Auth 🛡️ True Zero-Knowledge Authentication with Hardware-Bound Device Ring Signatures 🎯 What is Legion? Legion is a zero-knowledge authentication system that proves you're authorized without revealing who you are. You prove something based on public data without linking your current...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Basic Information Vulnerability ID: CVE-2023-22809 Vulnerability Level: High Vulnerability Score: 7.8 Affected Versions: sudo 1.8.0 - sudo 1.9.12p1 sudo = 1.8.0 or sudo = 1.9.12p1 Attack Effect: Local Privilege Escalation Attack Method Modify root username in...

EUVD-2026-108979

A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite ZCS allows the Unix zimbra account to execute arbitrary commands as root. The passwordless sudo interface accepts JVM arguments that are not adequately restricted. An attacker can postpone Jetty...

PT-2026-122109

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions 10.1.16 and 10.1.21 Description A local privilege escalation issue exists in the zmmailboxdmgr launcher. The passwordless sudo interface fails to adequately restrict JVM arguments, allowing the Unix zimbra...

wazuh-unauth-chain

Wazuh exploit-chain PoC fixed in 4.14.8 — CVE-2026-74034 / C...

EUVD-2026-100756

Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3...

CVE-2026-15468

Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3...

CVE-2026-15468

Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3...

CVE-2026-15468

HYPR Passwordless on Windows versions prior to 11.3.3 is vulnerable to an authorization bypass caused by a User-Controlled key vulnerability (CWE-639). This security flaw allows for Privilege Escalation . No specific exploit details or remediation steps are provided in the documents beyond the ve...

CVE-2026-15468: Authorization Bypass Through User-Controlled Key

Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3...

PT-2026-113549

Name of the Vulnerable Software and Affected Versions HYPR Passwordless versions prior to 11.3.3 Description An authorization bypass exists in HYPR Passwordless on Windows due to a user-controlled key, which allows for privilege escalation. Recommendations Update HYPR Passwordless to version 11.3...

EulerOS 2.0 SP11 : kbd (EulerOS-SA-2026-4331)

According to the versions of the kbd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented...

EulerOS 2.0 SP11 : kbd (EulerOS-SA-2026-4240)

According to the versions of the kbd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented...

RLSA-2026:78951 Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...

kbd security update

An update is available for kbd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kbd packages provide tools for managing console behavior on a Linux system,...

kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

Moderate: Red Hat Security Advisory: kbd security update

An update for kbd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

ALSA-2026:78951 Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...