340984 matches found
android-workprofile-exploit
Android Work Profile Security Research Controlled lab research on Android work-profile provisioning behavior, policy timing, and enterprise isolation boundaries. This repository documents academic security research performed in a controlled environment. It is not intended for unauthorized access,...
CVE-2021-46075
CVE-2021-46075 Название эксплойта: Vehicle Service Management System - множественное повышение привилегий, ведущее к CRUD-операциям Автор эксплойта: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH Ссылки:...
Fragnesia
Privilege escalation locale CVE-2026-46300 Utilisation : CGOENABLED=0 go build -ldflags="-s -w" -o fragnesia . ./fragnesia Versions affectées : Ubuntu 16.04 LTS RHEL 8,9 Rocky Linux 8,9,10 CentOS Stream 8,9,10 Oracle Linux 8,9 openEuler 20.03-LTS-SP4 22.03-LTS-SP3 22.03-LTS-SP4 24.03-LTS...
DirtyFrag
Élévation de privilèges locale / Évasion de conteneur CVE-2026-43284 / CVE-2026-43500 Utilisation： CGOENABLED=0 go build -ldflags="-s -w" -o dirtyfrag . ./dirtyfrag Versions affectées： Ubuntu 24.04.4 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS 14.04 LTS RHEL 8.x,9.x,10.1 CentOS 8,9,10...
CVE-2026-36213-poc
CVE-2026-36213: Локальное повышение привилегий в MEmu Android Emulator 9.2.7.0 https://img.shields.io/badge/platform-Windows-blue https://img.shields.io/badge/CVE-2026--36213-red https://img.shields.io/badge/EDB--ID-52615-orange Обзор Этот репозиторий содержит proof-of-concept PoC на Python для...
CVE-2025-32462-CVE-2025-32463-PoC-Lab
CVE-2025-32462 & CVE-2025-32463 – Laboratoire de PoC avancé Ce dépôt fournit un laboratoire basé sur conteneur et un PoC détaillé pour deux vulnérabilités critiques de sudo: CVE-2025-32462 – contournement de la logique de correspondance de l'hôte sudo -h CVE-2025-32463 – échappement de la...
CVE-2026-19185
The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...
CVE-2026-19184
The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...
CVE-2026-103510
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...
CVE-2024-57429
CVE-2024-57429 Une vulnérabilité de falsification de requête intersite CSRF dans la fonction pjActionUpdate de PHPJabbers Cinema Booking System v2.0 permet à des attaquants distants d'élever leurs privilèges en amenant un administrateur authentifié à soumettre une requête non autorisée. Impact :...
CVE-2026-90227
A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express input/output control ioctl handling. An unprivileged local user could exploit this vulnerability by bypassing access checks in the NVMEIOCTLSUBMITIO function. This allows them to perform unauthorized I/O operations on a...
CrystalPotato
CrystalPotato Crystal-порт GodPotato — локальное повышение привилегий с учётных записей, имеющих SeImpersonatePrivilege, до SYSTEM. Работает за счёт злоупотребления DCOM OXID Resolver и олицетворения через именованные каналы. Windows API разрешаются динамически и вызываются через косвенные заглуш...
mt6985-CVE-2026-43499
Журнал неудач CVE-2026-43499: попытка адаптации для MT6985 Вывод : потрачено 68M токенов, root не получен. Причина : тайминговая атака KernelSnitch ненадёжна на MTK Dimensity 9200, CONFIGPANICONOOPS=y не оставляет пространства для проб и ошибок. В этой статье задокументирован весь процесс...
CVE-2025-55885
CVE-2025-55885 Description Vulnérabilité d'injection SQL dans Alpes Recherche et Developpement ARD GEC en Ligne avant la version 2025-04-23 permet à un attaquant distant d'élever ses privilèges via les paramètres GET dans index.php Vecteurs d'attaque Injection SQL via le paramètre GET non assaini...
CVE-2026-38765
CVE-2026-38765 Проблема в Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 позволяет локальному атакующему повысить привилегии через драйвер ядра pgsecdl.sys...
EUVD-2026-92315
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...
CVE-2026-103510 Authentication bypass via blank auth token in P4Search
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...
CVE-2026-103510 Authentication bypass via blank auth token in P4Search
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...
CVE-2026-103510
P4 Search versions prior to 2026.4.2 are vulnerable to an authentication bypass because the service does not fail securely when presented with a blank authentication token . An unauthenticated attacker with network access can exploit this flaw to obtain highest application privileges , potentiall...