CVE-2026-41651

🔥 CVE-2026-41651 — PackageKit TOCTOU Local Privilege Escalation Pack2TheRoot Local Privilege Escalation exploit targeting the PackageKit daemon. Escalates from an unprivileged local user to root through a TOCTOU race condition vulnerability. 📌 Overview CVE-2026-41651 also known as Pack2TheRoot is...

CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch Linux Kernel Local Privilege Escalation LPE Local Privilege Escalation vulnerability affecting the Linux Kernel CIFS/SMB client. 📖 Overview CVE-2026-46243 is a Local Privilege Escalation LPE vulnerability within the Linux Kernel's CIFS/SMB client. Improper validation ...

CVE-2023-1326

CVE-2023-1326 A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is...

CVE-2026-31431---Copy-Fail-PoC

Description This repository contains an analysis of CVE-2026-31431 Copy Fail in the Linux kernel. It targets local privilege escalation LPE through page cache manipulation. Legal Notice This project is for educational and testing purposes only. Any unauthorized use is the sole responsibility of t...

CVE-2026-105688 Penpot: Team admin can escalate to owner via team invitation (missing owner-role guard on the invitation path)

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, create-team-invitations and the invitation acceptance path allow a non-owner team administrator to assign the owner role because invitation roles are persisted and applied without the role-ceiling check used by...

CVE-2026-105688

The open-source design and prototyping platform Penpot is vulnerable to privilege escalation prior to version 2.18.0 . The root cause is a missing owner-role guard on the create-team-invitations and invitation acceptance paths. Because invitation roles are persisted without the role-ceiling check...

CVE-2026-105688 Penpot: Team admin can escalate to owner via team invitation (missing owner-role guard on the invitation path)

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, create-team-invitations and the invitation acceptance path allow a non-owner team administrator to assign the owner role because invitation roles are persisted and applied without the role-ceiling check used by...

CVE-2026-105688 Penpot: Team admin can escalate to owner via team invitation (missing owner-role guard on the invitation path)

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, create-team-invitations and the invitation acceptance path allow a non-owner team administrator to assign the owner role because invitation roles are persisted and applied without the role-ceiling check used by...

CVE-2025-2594

CVE-2025-2594 User Registration & Membership = 4.1.2 - Authentication Bypass Disclaimer! The information presented in this CVE Common Vulnerabilities and Exposures writeup is for educational and informational purposes only. The details provided are based on publicly available resources, research,...

CVE-2022-37706

CVE-2022-37706 Exploit for CVE-2022-37706, a 0-day in one of the main window managers of Linux - Enlightenment https://www.enlightenment.org/. All Credit to MaherAzzouzi https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit. This is a copy of the exploit for CTFs...

cve-2020-13933

cve-2020-13933 cve-2020-13933 Apache Shiro privilege bypass vulnerability This reproduction is very simple. First, set up the environment using IDEA + Shiro Reference: https://www.cnblogs.com/ph4nt0mer/p/13535999.html Then run, access, and capture packets...

CVE-2026-85394

A flaw was found in python-jose. A remote attacker who obtains the service's public key can exploit an algorithm confusion vulnerability when signature verification algorithms are not strictly restricted. By utilizing a specifically formatted public key as a shared secret key, the attacker can...

CVE-2026-105678 Ghost: Editors Could Promote Staff Users to Their Own Role

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105678 Ghost: Editors Could Promote Staff Users to Their Own Role

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105678

The Ghost Node.js content management system is vulnerable to an improper privilege management issue in versions 0.5.0 through 6.64.0 . Staff users holding the Editor or Super Editor roles can bypass permission restrictions to assign their own roles to users with Author or Contributor roles. This ...

CVE-2026-58859

In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58880

In handleappvalresponse of btifrc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55270

In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55280

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58815

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...