CVE-2025-6019-udisks-lpe-no-image

CVE-2025-6019-udisks-lpe-no-image Catena di escalation dei privilegi basata solo su script che utilizza CVE-2025-6019 e UDisks2 nessuna immagine del filesystem inclusa. Crediti, Contesto e Catena dell'Exploit Questo repository non introduce una nuova vulnerabilità. La tecnica di escalation dei...

CVE-2026-41651-Python

Pack2TheRoot: CVE-2026-41651 Python PoC Python dell'exploit di escalation dei privilegi locali TOCTOU di PackageKit. Qualsiasi utente locale non privilegiato può installare pacchetti arbitrari come root senza alcuna autenticazione. Campo| Valore ---|--- CVE| CVE-2026-41651 Componente| PackageKit...

Improper Privilege Management

Apache Syncope is vulnerable to Improper Privilege Management. The vulnerability is due to insufficient authorization checks in certain user workflow configurations, which allows an authenticated user to grant themselves defined Roles through a REST API and gain their associated entitlements,...

CVE-2020-1034

CVE-2020-1034 PoC che dimostra l'uso di CVE-2020-1034 per l'escalation dei privilegi. Testato su Windows 10 2004 non aggiornato, build 19041.488. La vulnerabilità è stata scoperta da Microsoft e corretta nel patch Tuesday dell'8/9/2020:...

badspin

Bad Spin: LPE del Binder Android Autore: Moshe Kol Exploit di escalation dei privilegi da unstrustedapp per la vulnerabilità del Binder Android CVE-2022-20421. La vulnerabilità è corretta nel bollettino sulla sicurezza di Android di ottobre 2022. L'exploit funziona su dispositivi con versioni del...

Ubuntu-Gnome-privilege-escalation

Ubuntu-Gnome-privilege-escalation Uno script bash che sfrutta CVE-2020-16126/CVE-2020-16127 per ottenere l'escalation dei privilegi. Uno script bash che consente di effettuare facilmente l'escalation dei privilegi locali su Ubuntu sfruttando le vulnerabilità CVE-2020-16126/CVE-2020-16127, richied...

CVE-2022-0847-DirtyPipe-Exploit

Cos'è questo Questa è la prova di concetto di Max Kellermann per Dirty Pipe, ma modificata per sovrascrivere il campo della password di root in /etc/passwd e ripristinarlo dopo aver ottenuto una shell di root. Nota a margine: Non rivendico alcun merito per aver scoperto questa vulnerabilità o per...

CVE-2026-9018

CVE-2026-9018 CVE-2026-9018 — Easy Elements for Elementor ≤ 1.4.5 | Escalation dei privilegi non autenticata Ricerca di: Atomic Edge Gravità: Alta | CVSS: 8.8 | Autenticazione richiesta: Nessuna Panoramica Esiste una vulnerabilità di escalation dei privilegi non autenticata nel plugin WordPress...

CVE-2026-29198-POC

CVE-2026-29198-POC Rocket.Chat OAuth2 NoSQL Injection , in Rocket.Chat 8.3.0, 8.2.1, 8.1.2, 8.0.3, 7.13.5, 7.12.6, 7.11.6, e 7.10.9 installazione setup: pip3 install -r requirement.txt Exploit: python3 poccve202629198.py --url domain --escalate -v...

WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Taskbot versions = 6.6...

Astra Linux – Vulnerability in xorg-server

A vulnerability was discovered in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges escalation on systems where X is used...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A array indexing vulnerability was discovered in the netfilter subsystem of the Linux kernel. The absence of a certain macro could lead to an incorrect calculation of the offset of the h-nets array, giving attackers the ability to arbitrarily increment/decrement a memory buffer beyond its bounds...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

Astra Linux – Vulnerability in multipath-tools

Multipath-tools versions 0.7.7 through 0.9.x, prior to 0.9.2, allowed local users to obtain root access. This vulnerability was exploited in conjunction with CVE-2022-41974. Local users who had access to /dev/shm could modify symlinks within multipathd due to incorrect symlink handling. This coul...

Astra Linux – Vulnerability in exim4

A use-after-free exists in Exim 4.96 through 4.98.1, which could allow users with command-line access to escalate their privileges...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. The supported versions affected are 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. This vulnerability is difficult to exploit; it allows low-privilege attackers with network access via multiple protocols to...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel up to version 6.3.1, a use-after-free issue in Netfilter’s nftables module arises when processing batch requests. This allows unprivileged local users to obtain root privileges. The issue occurs due to improper handling of anonymous sets...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Fixed a slab-use-after-free issue caused by a dangling pointer dqipriv. When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses the syscall to call ocfs2getnextid...

Astra Linux – Vulnerability in Firefox, Thunderbird

Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

Astra Linux – Vulnerability in Intel Microcode

The sequence of processor instructions may lead to unexpected behavior on some Intel processors. This could potentially allow an authenticated user to enable privilege escalation, information disclosure, or denial of service through local access...