CVE-2023-36645

== Software afectado %hardbreaks Proveedor: ITB-GmbH Productos afectados: TradePro v9.5 Componente: Función Customer; Acción oordershow Confirmado: sí == Vector de ataque %hardbreaks Tipo: SQLi Tipo de acceso: Remoto Impacto: Divulgación de información; Escalada de privilegios La inyección SQL en...

cve-2021-3156-sudo-lab

🐧 CVE-2021-3156 — Laboratorio de Seguridad Sudo Proyecto educativo desarrollado en Python con enfoque en el análisis de la vulnerabilidad CVE-2021-3156 Baron Samedit , una falla crítica en sudo que permitía elevación de privilegios local en sistemas Linux. 📌 Objetivo del Proyecto Este proyecto fu...

Important: rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

RockyLinux 10 : thunderbird (RLSA-2026:73130)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:73130 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component CVE-2026-75874 firefox: Sandbox escape due to...

Security Bulletin: NVIDIA GPU Display Driver - September 2026

NVIDIA has released a software update for NVIDIA® GPU Display Driver and NVIDIA® vGPU Software. To protect your system, download and install the latest drivers referenced in the Security Updates sections of this bulletin. Go to NVIDIA Product Security. Details The following tables summarize the...

SUSE CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

CVE-2026-69328

StorSvc loads SprintCSP.dll by relative name as SYSTEM. Plant it in a user-writable HKLM PATH directory, get SYSTEM. Requires a user-writable directory in HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\Path. None on a clean image. Tooling installers add them...

SUSE CVE-2026-100761

Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

SUSE CVE-2026-100764

Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

SUSE CVE-2026-100782

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

SUSE CVE-2026-100797

Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

SUSE CVE-2026-100801

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

SUSE CVE-2026-100807

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

SUSE CVE-2026-100820

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

SUSE CVE-2026-100824

Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

Exploit-CVE-2014-4113

Exploit-CVE-2014-4113 CVE-2014-4113 is a Local & Privilege Escalation Exploits. You can get the SYSTEM Privilege. support platform: x86; windows xp and windowx 7 usage: 1. cmd.exeлǰĿ¼ִ cve-2014-4113.exe target program name for example: cve-2014-4113.exe calc.exe...

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation

Escalada de privilegios local automática davfs2-1.4.6-1.4.7 Explota automáticamente sistemas con davfs2 vulnerable CVE-2013-4362 ¿PARA QUÉ ES ESTO? Solo dos scripts .sh para simplificar la explotación de davfs2 con versiones vulnerables Requisitos previos Al menos uno de los módulos 'fuse' o 'cod...

CVE-2025-30400

Concepto CVE-2025-30400: Use-After-Free UAF en Windows DWM Resumen del proyecto Este repositorio presenta el Concepto CVE-2025-30400 , un programa en Python diseñado para ilustrar el impacto de una vulnerabilidad de día cero de escalada de privilegios Use-After-Free UAF , como la reportada en...

DirtyPIPE-CVE-2022-0847

CVE-2022-0847 POC Fuente: https://www.exploit-db.com/exploits/50808 1. Compilación En Linux, gcc -o dirty dirty.c compila el programa POC. 2. Uso ./dirty SUID ejecuta el programa. Donde SUID es la ruta del programa que tiene SUID. Normalmente se puede usar /usr/bin/passwd, es decir, ejecutar...