WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nguyen Viet Tin in WordPress Plugin WP User Profiles versions = 2.7.3...

CVE-2020-25637-libvirt-double-free

CVE-2020-25637 Description A double-free issue occurred in the libvirt API, in versions prior to version 6.8.0, responsible for requesting information about the network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the...

WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nixxies in WordPress Plugin Salon booking system versions = 10.31.7...

CVE-2021-27285

CVE-2021-27285 The Inspur ClusterEngine cluster management platform is a job management software specifically designed for Inspur TianSuo series HPC products. Inspur ClusterEngine has an improper SUID configuration issue, which allows non-administrative users to escalate privileges through certai...

CVE-2018-13341

CVE-2018-13341 This Tool Aims to Exploit the CVE-2018-13341, By Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to run SUDO commands. The Crestron Toolbox Protocol CTP can be connected to...

WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Import and export users and customers versions = 2.5.5...

CVE-2025-25618

CVE-2025-25618 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to change the Section Name and Room Number — permissions that should be restricted to administrators. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to th...

android-workprofile-exploit

Android Work Profile Security Research Controlled lab research on Android work-profile provisioning behavior, policy timing, and enterprise isolation boundaries. This repository documents academic security research performed in a controlled environment. It is not intended for unauthorized access,...

CVE-2021-46075

CVE-2021-46075 Exploit Title: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Exploit Author: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH References:...

Fragnesia

Local Privilege Escalation CVE-2026-46300 Usage: CGOENABLED=0 go build -ldflags="-s -w" -o fragnesia . ./fragnesia Affected Versions: Ubuntu 16.04 LTS RHEL 8,9 Rocky Linux 8,9,10 CentOS Stream 8,9,10 Oracle Linux 8,9 openEuler 20.03-LTS-SP4 22.03-LTS-SP3 22.03-LTS-SP4 24.03-LTS 24.03-LTS-SP1...

DirtyFrag

Local Privilege Escalation / Container Escape CVE-2026-43284 / CVE-2026-43500 Usage: CGOENABLED=0 go build -ldflags="-s -w" -o dirtyfrag . ./dirtyfrag Affected Versions: Ubuntu 24.04.4 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS 14.04 LTS RHEL 8.x,9.x,10.1 CentOS 8,9,10 Rocky Linux 8,9,...

CVE-2026-36213-poc

CVE-2026-36213: تصعيد الصلاحيات المحلي في محاكي MEmu Android الإصدار 9.2.7.0 https://img.shields.io/badge/platform-Windows-blue https://img.shields.io/badge/CVE-2026--36213-red https://img.shields.io/badge/EDB--ID-52615-orange نظرة عامة يحتوي هذا المستودع على إثبات مفهوم PoC بلغة Python للثغرة...

CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462 & CVE-2025-32463 – Advanced PoC Lab This repository provides a container-based lab and detailed PoC for two critical sudo vulnerabilities: CVE-2025-32462 – sudo -h host matching logic bypass CVE-2025-32463 – sudo -R chroot NSS library escape Research & Credit Original research by...

CVE-2026-19185

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

CVE-2026-19184

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...

CVE-2026-103510

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...

CVE-2024-57429

CVE-2024-57429 A cross-site request forgery CSRF vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request. Impact: Exploitation of this CSRF...

CVE-2026-90227

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express input/output control ioctl handling. An unprivileged local user could exploit this vulnerability by bypassing access checks in the NVMEIOCTLSUBMITIO function. This allows them to perform unauthorized I/O operations on a...

CrystalPotato

CrystalPotato نسخة Crystal من GodPotato، وهي أداة لتصعيد الامتيازات محليًا من الحسابات التي تمتلك صلاحية SeImpersonatePrivilege إلى صلاحية SYSTEM. تعمل عن طريق استغلال DCOM OXID Resolver وانتحال هوية الأنابيب المُسمّاة named pipes. يتم حلّ واجهات برمجة تطبيقات Windows APIs ديناميكيًا واستدعاؤها ع...

mt6985-CVE-2026-43499

سجل فشل CVE-2026-43499: محاولة تكييف MT6985 الخلاصة : استهلكت 68M توكن، ولم أحصل على صلاحيات root. السبب : هجوم التوقيت KernelSnitch غير موثوق على Dimensity 9200 من MTK، وCONFIGPANICONOOPS=y لا يترك مجالاً للتجربة والخطأ. هذه المقالة توثق رحلة الأخطاء الكاملة، كمرجع لمن يأتي بعدنا لتجنب هذه...