CVE-2025-27591-PoC

CVE-2025-27591-PoC CVE-2025-27591 PoC — Below Local Privilege Escalation This repository contains a Proof of Concept PoC demonstrating the local privilege escalation vulnerability identified as CVE-2025-27591 in Below , a Linux system observability tool. Made for...

thm-cybersec-portfolio

TryHackMe Notes — Cybersecurity Portfolio Personal notes and summaries of completed TryHackMe rooms. Built as a study reference and portfolio for IT security roles. Completed Rooms | Room| Topic ---|---|--- 01| Linux Privilege Escalation| Linux privesc techniques 02| Sudo Buffer Overflow|...

CVE-2025-68999-POC

CVE-2025-68999 Happy Addons for Elementor prepare, but then drops $entry-metakey straight into the SQL string without escaping: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; Because metakey comes from the database, the code treats it as trusted. But...

CVE-2026-8181

CVE-2026-8181 exploit Burst Statistics WordPress Plugin — Authentication Bypass to Administrator Privilege Escalation Exploit for the CVE-2026-8181 discovered by Chloe Chamberland and PRISM. ⚠️ Disclaimer This repository is provided for research and defensive security purposes only. The author...

DEBIAN-CVE-2026-98214

In the Linux kernel, the following vulnerability has been resolved: selinux: recheck intermediate backing files on mprotect mprotect can be used to bypass the SELinux checks that mmap performs against the intermediate layers of a stacked filesystem. mmap checks every backing layer as the request...

CVE-2026-95594

Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0...

CVE-2026-48197

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0...

CVE-2026-39774

Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...

CVE-2026-39775

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...

CVE-2026-39773

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39761

Unauthenticated Privilege Escalation in Meta Box AIO = 3.7.1 versions...

CVE-2026-39765

Shop Manager Privilege Escalation in Challan = 3.7.88 versions...

CVE-2026-39753

Unauthenticated Privilege Escalation in Taskbot = 6.6 versions...

CVE-2026-105058

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

CVE-2026-105070

Unauthenticated Privilege Escalation in Salon booking system = 10.31.7 versions...

CVE-2026-104405

Unauthenticated Privilege Escalation in GiveWP = 4.17.0 versions...

CVE-2026-104757

Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...

CVE-2026-13355

CVE-2026-13355 — Meta Box AIO Unauthenticated Administrator Privilege Escalation Python 3 proof-of-concept scanner and exploit for CVE-2026-13355 in the WordPress bundle Meta Box AIO and related MB Frontend Submission / MB User Profile extensions. | ---|--- Platform| WordPress plugin Component|...

Active-Directory-BadSuccessor

Active-Directory-BadSuccessor Overview In this room, we explore the BadSuccessor privilege escalation technique, a vulnerability that abuses delegated Managed Service Accounts dMSAs in Active Directory. The attack allows a user with sufficient control over a dMSA object to impersonate another...

glass-cage-i18-2025-24085-and-cve-2025-24201

Original Fork Network Left Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-24201 – WebKit Remote Code Execution CVE-2025-24085 – Core Media Privilege Escalation Reported to Apple: January 9, 2025 Patched: February–March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 CVSS Base Score...