CVE-2024-51378

CVE-2024-51378 — Resumen, Mitigación y Documentación Repositorio Seguro ⚠️ Advertencia ética y legal Todo el material en este repositorio es únicamente con fines educativos, de investigación de seguridad legítima y pruebas en entornos que posees o para los que tienes permiso explícito. No ejecutes...

CVE-2025-27591

Exploit for CVE-2025-27591 For educational purposes only Built for HTB machine "Outbound" How does CVE-2025-27591 work? CVE-2025-27591 is a local privilege escalation vulnerability for the Service Below in versions prior to 0.9.0. The service creates a world-writable directory at /var/log/below...

CVE-2019-1388-Privilege-Escalation--2021-

CVE-2019-1388 Privilege Escalation CVE-2019-1388 Lab Analysis: Documented local privilege escalation via Windows UAC certificate dialogs on Windows 7. CVE-2019-1388: Windows UAC Privilege Escalation Lab An educational cybersecurity lab and technical analysis documenting CVE-2019-1388 —a local...

copyfail-guard

copyfail-guard Automated detection and mitigation tool for the vulnerability CVE-2026-31431 "Copy Fail", a local privilege escalation LPE in the algifaead module AFALG interface of the Linux kernel. ⚠️ Scope: this project is purely defensive. It does not contain, generate, or reference exploit...

CVE-2026-81474

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2022-24637

CVE-2022-24637 — Open Web Analytics prior to 1.7.4 Defensive notes on a critical unauthenticated information-disclosure issue in Open Web Analytics OWA that can lead to privilege escalation. Encountered while working the Fruityloops box on echoCTF, which ran Open Web Analytics 1.7.3. Summary Fiel...

CVE-2026-45258_1day_LPE_exploit

Este repositorio no tiene un README...

CVE-2026-92162

CVE-2026-92162: Flatpak DeployAppstream arch Path Traversal Educational write up and test mode proof of concept for a path traversal in the Flatpak system helper flatpak-system-helper. The DeployAppstream D-Bus method accepts an arch string that is placed into a filesystem path and created as roo...

CVE-2026-12793

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-12793 CVE-2026-12793 JetFormBuilder — Dynamic Blocks Form Builder 3.6.2 — jetmonsters The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including,...

gosign-desktop-exploit-poc

Múltiples vulnerabilidades en GoSign Desktop conducen a ejecución remota de código Nombre: Omisión de verificación TLS y actualización insegura en GoSign Desktop CVEs: CVE-2025-34324, CVE-2025-34327 Sistema afectado: GoSign Desktop = 2.4.0 Corrección: FoSign Desktop 2.4.1 corregido parcialmente...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder = 5.1.2 — Escalada de Privilegios No Autenticada mediante Inyección de Rol 🔥 Resumen de la Vulnerabilidad El plugin de WordPress Divi Form Builder en versiones = 5.1.2 es vulnerable a una escalada de privilegios no autenticada. Esta falla crítica permite a...

CVE-2026-50610

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications,...

CVE-2026-50609

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...

CVE-2021-36934-HiveNightmare-Lab

CVE-2021-36934 HiveNightmare - Laboratorio Educativo 🎯 Objetivo Reproducir y analizar la vulnerabilidad HiveNightmare en un entorno de laboratorio controlado. 📋 Tabla de Contenidos Descripción de la Vulnerabilidad Implementación Demostración Configuración del Laboratorio y Herramientas Pasos de...

CVE-2026-50610 Improper Access control Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications,...

CVE-2026-50610

CVE-2026-50610 affects the Acer System Monitoring component bundled with NitroSense and PredatorSense software. The root cause is insufficient access controls in a privileged service , allowing an authenticated local user to access the service and perform unauthorized registry modifications , pot...

EUVD-2026-81402

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications,...

CVE-2026-50609 Unauthorized Registry Modification Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...

EUVD-2026-81401

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...

CVE-2026-91101

A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities within several components could allow a remote attacker to execute code on the system, gain elevated privileges, or access sensitive information. These issues could also lead to a denial of service, making...