CVE-2026-65660-Poc

MS SharePoint CVE-2026-65660 - Exploit de inyección de código mediante directiva Register maliciosa Descripción Este repositorio proporciona un exploit listo para producción para CVE-2026-65660 Control inadecuado de la generación de código, CWE-94 en Microsoft SharePoint Server. La vulnerabilidad...

opace6-cve-2026-64560

Herramienta de Root temporal para OnePlus Ace 6 Obtén permisos de root temporales para el ciclo de arranque actual del OnePlus Ace 6 mediante la vulnerabilidad CVE-2026-64560 UAF en el temporizador de CPU POSIX del kernel de Linux. Se pierden tras reiniciar y no modifica las particiones del...

COWSlip

COWSlip: XFS reflink stale-mapping LPE originally RefluXFS or CVE-2026-64600 The name describes the mechanism: COW identifies XFS copy-on-write/reflink handling. Slip describes the stale data-fork mapping slipping to the wrong physical block after the ILOCK cycle. However, official credits belong...

cve-2026-64560-a16

CVE-2026-64560 — 工具链 + 多目标移植 CVE-2026-64560 是 Linux 内核 posix-cpu-timers 的 use-after-free （本地无特权竞态，CVSS 3.1 = 7.8；6.6.118 未修复，6.6.147 才修）。 这个仓库有两件事：把上游只能靠一堆 Python 脚本驱动的工具链做成单个静态 Go 二进制 ， 以及补上上游没有的 realme RMX5010（A16 / SM8750） 目标。 !WARNING 这是实验性内核 exploit 代码。它可能重启设备、破坏内核状态或造成数据丢失。...

CVE-2026-43786

🔐 CVE-2026-43786 🚨 Escalada de Privilegios Local en macOS — Validación de Derechos Incorrecta 📌 Descripción General CVE-2026-43786 es una vulnerabilidad de escalada de privilegios local que afecta a macOS de Apple. La vulnerabilidad está relacionada con una validación incorrecta de derechos...

CVE-2026-53519-PoC

CVE-2026-53519 — Nezha Dashboard 路徑遍歷與 JWT 偽造 本儲存庫包含一個針對 Nezha Dashboard 漏洞的概念驗證（PoC）程式，該漏洞允許未經驗證的路徑遍歷（Path Traversal） ，導致敏感檔案（包括 jwtsecretkey）洩露，並進一步實現JWT Token 偽造以取得管理員存取權限 。 此問題已於 GitHub Security Advisory 正式追蹤： https://github.com/nezhahq/nezha/security/advisories/GHSA-5c25-7vpj-9mqh 如公告所述，該漏洞源...

sdwan-cve-2021-1480

Exploit para CVE-2021-1480 SD-WAN Materiales de PoC para explotar el CVE-2021-1480 en Cico SD-WAN. La publicación completa está disponible en el sitio web de XMCO: https://blog.xmco.fr/wp-content/uploads/2021/08/XMCO-SDWANReport-CVE-2021-1480.pdf Uso: 1. actualiza las líneas 173 y 176 para...

rootpacket-cve-2026-31431

rootpacket CVE-2026-31431 A Linux Docker-to-host cryptojacking toolkit captured from live attacks on Kinryū Labs honeypots. It breaks in through an exposed Docker Engine API, escapes the container to root the host with CVE-2026-31431 , installs a kernel rootkit, and runs an XMRig Monero miner. Fu...

CVE-2022-0847-Docker

Dirty Pipe CVE-2022-0847: Una Demostración Práctica de Explotación en Docker Este repositorio proporciona un entorno Docker interactivo y autónomo para demostrar y analizar de forma segura la vulnerabilidad de escalada de privilegios "Dirty Pipe". Está diseñado como una herramienta educativa para...

WordPress FlatPM <3.0.13 - Cross-Site Scripting

WordPress FlatPM plugin before 3.0.13 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape certain parameters before outputting them back in pages, which can be exploited against high privilege users such as admin. An attacker can steal cookie-based authenticatio...

User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation

The User Registration & Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 4.1.1. This is due to insufficient restrictions on role type in the 'preparemembersdata' function. This makes it possible for unauthenticated attackers to create newuser...

WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation

Privilege escalation vulnerability exists in the Frontend Login and Registration Blocks plugin for WordPress versions = 1.0.7. An unauthenticated attacker can exploit the AJAX endpoint flrblocksusersettingshandleajaxcallback to change the administrator's email address. Subsequently, the attacker...

KONGA 0.14.9 - Privilege Escalation

KONGA 0.14.9 allows attackers to set higher privilege users to full administration access. The attack vector is a crafted condition, as demonstrated by the /api/user/ID at ADMIN parameter. id: CVE-2021-42192 info: name: KONGA 0.14.9 - Privilege Escalation author: rschio severity: high description...

KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS)

Reflective Cross Site Scripting XSS vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APPHOST parameter at config/i18n/en/main.php. id: CVE-2023-49489 info: name: KodeExplorer 4.51 - Reflective Cross Site Scripting XSS...

WP BASE Booking - Reflected XSS

WP BASE Booking of Appointments, Services and Events WordPress plugin 5.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to...

SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...

WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation

User Registration & Membership WordPress plugin = 5.1.2 contains an improper privilege management vulnerability caused by accepting user-supplied roles without server-side allowlist enforcement, letting unauthenticated attackers create administrator accounts id: CVE-2026-1492 info: name: WordPres...

WP Triggers Lite - Cross-Site Scripting

WP Triggers Lite WordPress plugin v2.5.3 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation

MemberGlut WordPress plugin 1.1.5 contains a broken access control vulnerability caused by lack of validation of roles during front-end registration, letting unauthenticated users register with arbitrary roles including administrator, exploit requires no authentication. id: CVE-2026-12394 info:...

Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection

Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...