RLSA-2026:68549 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component...

firefox security update

An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

CVE-2016-8655_Android

CVE-2016-5195 GoldFish 3.4 This works on the goldfish 3.4 Emulator Initroot: https://alephsecurity.com/2017/06/07/initroot-moto/ has been released for my device harpia, so I have stopped porting the exploit to my device harpia/.... I have learnt a large amount from working on this project, but...

EUVD-2026-87891

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not prevent deserialization of untrusted input and does not correctly restrict a privileged maintenance feature to administrators, allowing users granted a custom booking-management capability, which an...

CVE-2020-0668

CVE-2020-0668 Usa CVE-2020-0668 para realizar una operación arbitraria de movimiento de archivos con privilegios. Usa https://github.com/itm4n/UsoDllLoader Windows = 1903 O https://github.com/xct/diaghub Windows 1903 para la escalada de privilegios. Demo Enlaces y Recursos...

KSuRoot

KSuRoot ⚠️ 温馨提示 ：蓝厂机型调度策略较为严格，提权时子进程易被系统回收。请先在「开发者选项」中开启「停止限制子进程」后再执行提权，成功率更高。 基于 CVE-2026-43499（GhostLock） 内核漏洞的一键 KernelSU 提权工具。 本分支以 KSuRoot 为蓝本，完整同步 Root-My-Galaxy v0.2.6 主线更新，并在此基础上增加了载荷构建 、厂商载荷内置 与一整套液态玻璃 UI。 Mod by hmascs · 版本 4.1.0 · Apache-2.0 仓库：https://github.com/hmascs/KSuRoot 4.1.0...

CVE-2023-32749

PoC for CVE-2023-32749 This is a quick and dirty PoC I wrote for CVE-2023-32749 for Pydio Cells. The scripts creates a new user account with the all the roles available when provided with a valid credential. All credits goes to the original researchers. Installation The only requirements is the...

FluentD-TD-agent-Exploit-CVE-2020-28169

FluentD-TD-agent-WindowsExploit V4.0.1 CVE-2020-28169 Insecure Folder permission that leads to privilege escalation Download URL: https://td-agent-package-browser.herokuapp.com/4/windows...

CVE-2024-26574

CVE-2024-26574 Wondershare Filmora v.13.0.51 - Insecure Permissions Privilege Escalation Description: Insecure Permissions vulnerability in Wondershare Filmora and versions below allows a local unprivileged attacker to execute arbitrary code as SYSTEM via a crafted script to the controlable path...

bola-CVE-2023-27524

bola-CVE-2023-27524 📄 README.md — BOLA CVE-2023-27524 Demo Project root@kitploit: 🔐 Broken Object Level Authorization BOLA Demonstration CVE-2023-27524 Security Analysis & Fix --- 📌 Project Overview This project demonstrates a real-world Broken Object Level Authorization BOLA vulnerability and it...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE Original CVE source written by xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Rewritten so the exploit can be run in 1 shell original exploit requires 2 shells. root@kitploit: Compile make all Create mount point for fuse filesystem mkdir -p...

CVE-2025-64446

POC - CVE-2025-64446 - FortiWeb RCE via Path Traversal + Auth Bypass Overview Fortinet products are some of the most battle-tested appliances protecting enterprise networks today — and ironically, the moment a Forti appliance becomes vulnerable, the blast radius is catastrophic. In late 2025, one...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 Exploit Title: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Exploit Author: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH References:...

CVE-2025-2304-POC

CVE-2025-2304-POC PoC for CVE-2025-2304 — Camaleon CMS 2.9.0 privilege escalation via mass assignment on the password change endpoint. Vulnerability The /admin/users/:id/updatedajax endpoint does not filter the role parameter before passing it to the model update, allowing any authenticated user ...

CVE-2021-40375

CVE-2021-40375 - Broken Access Control in OpenEyes 3.5.1 Description An improper access control vulnerability was identified in OpenEyes 3.5.1, developed by the Apperta Foundation. A low privileged user could load a patient's profile in their browser and access sensitive information without the...

CVE-2026-37071

CVE-2026-37071 Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator account via a specially crafted POST request to the affected...

CVE-2025-32463_POC

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. Contents File| Purpose ---|--- Dockerfile| Builds an Ubuntu 24.04 image with vulnerable sudo 1.9.16p2 and...

CVE-2023-4911

glibc Heap Buffer Overflow Vulnerability CVE-2023-4911 Item| Description ---|--- CVE ID| CVE-2023-4911 Attack Type| Heap Buffer Overflow → Local Privilege Escalation CVSS 3.1| 7.8 High Disclosure Date| 2023-10-03 Vulnerability Point| glibc dynamic loader ld.so GLIBCTUNABLES parser Affected...

CVE-2022-35899

CVE-2022-35899 Unquoted Service Path Asus GameSdk Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path Privilege Escalation Date: 07/14/2022 Exploit Author: Angelo Pio Amirante Version: 1.0.0.4 Tested on: Windows 10 Patched version: 1.0.5.0 Step to discover the unquoted...

CVE-2021-3156

CVE-2021-3156 Visualización, Fuzzing, Explotación y Parche de la Vulnerabilidad Baron Samedit Ver informe » Francesco Marchiori · Alessandro Lotto Tabla de Contenidos 1. Resumen 2. Visualización 3. Fuzzing 4. Explotación 5. Parche 🧩 Resumen Cualquier sistema operativo basado en Unix dispone del...