CVE-2026-45524

In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-92599

In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45524

A sandbox escape vulnerability exists in the isSystem method of WifiPermissionsUtil.java due to a missing permission check . This flaw allows for a local escalation of privilege without requiring additional execution privileges or user interaction. Exploitation details and specific remediation st...

CVE-2026-45524

In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-105632

Plane is an open-source project management tool. Prior to 1.4.0, the GraphQL joinProject mutation lets any workspace member add themselves to any project in that workspace including network=0 secret/private projects they were never invited to and grants them a full Member role read + write. The...

CVE-2023-4911

CVE-2023-4911 Esto es un PoC Prueba de Concepto para la vulnerabilidad de escalada de privilegios Looney Tunables en Linux. Esto está basado en este PoC. Muchas gracias a leesh3288. Aquí puedes encontrar un informe muy detallado, y aquí puedes ver un video muy interesante de IppSec. Uso Comprueba...

CVE-2021-41805

CVE-2021-41805 - HashiCorp Consul Enterprise RCE !WARNING LEGAL DISCLAIMER: This tool is STRICTLY for EDUCATIONAL PURPOSES ONLY! Usage of this tool for attacking targets without prior mutual consent is ILLEGAL. It is the user's responsibility to obey all laws that apply whilst using this tool. Th...

EUVD-2026-92582

Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20...

CVE-2026-103085 WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability

Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20...

CVE-2026-103085

The WP User Manager plugin for WordPress (versions

CVE-2026-103085 WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability

Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20...

CVE-2026-105634 Plane: Privilege Escalation: Project Guest Can Demote Admin/Member Roles

Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partialupdate method allows any project member, including a user with the lowest GUEST role, to modify another project member's role. The authorization check prevents assigning a role higher than the...

CVE-2026-105634

The open-source project management tool Plane is vulnerable to privilege escalation in versions prior to 1.3.0 . The issue resides in the ProjectMemberViewSet.partial_update method, where an inadequate authorization check allows any project member—including those with the lowest GUEST role—to mod...

CVE-2026-105634 Plane: Privilege Escalation: Project Guest Can Demote Admin/Member Roles

Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partialupdate method allows any project member, including a user with the lowest GUEST role, to modify another project member's role. The authorization check prevents assigning a role higher than the...

CVE-2026-105634 Plane: Privilege Escalation: Project Guest Can Demote Admin/Member Roles

Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partialupdate method allows any project member, including a user with the lowest GUEST role, to modify another project member's role. The authorization check prevents assigning a role higher than the...

EUVD-2026-92546

Plane is an open-source project management tool. Prior to 1.4.0, the GraphQL joinProject mutation lets any workspace member add themselves to any project in that workspace including network=0 secret/private projects they were never invited to and grants them a full Member role read + write. The...

CVE-2022-26923

CVE-2022-26923 As described by Tenable: Active Directory Domain Services Elevation of Privilege Vulnerability CVSS v3 Base score: 8.8 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity: High Summary: CVE-2022-26923 exploits a vulnerability in Microsoft Active Directory Certificate...

CVE-2025-25614

CVE-2025-25614 Incorrect Access Control in Unifiedtransform v2.0 leads to Privilege Escalation, allowing teachers to update the personal data of fellow teachers. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to the following endpoint: /teachers/edit/3...

CVE-2026-33825

🔵 CVE-2026-33825 — “BlueHammer” 🔵 Microsoft Defender Local Privilege Escalation LPE BlueHammer is a high-severity Local Privilege Escalation vulnerability affecting Microsoft Defender components on Windows systems. The flaw allows a low-privileged attacker to escalate privileges to NT...

dirty-pipe-poc

POC Exploit to add user to Sudo for CVE-2022-0847 Dirty Pipe Vulnerability This repo is based of the Vulnerability, Writeup and Exploit produced by Max Kellermann all found here. Just like everyone I had to take advantage of playing with the worlds most trivial to repro Priv Esc the blog post doe...