oppo-ghostlock

oppofindN2-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux-Kernel-Privilegieneskalation-Forschung Projektübersicht GhostLock CVE-2026-43499 ist eine Kernel-Stack-UAF-Schwachstelle, die Linux 2.6.39 bis 7.1-rc1 betrifft und durch eine Race Condition in FUTEXCMPREQUEUEPI ausgelöst wird...

CVE-2017-0213

CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Authentication bypass / incorrect access control in PerfexCRM Note: Steps above are the original discovery steps reported by Ajansha Shankar and Ahamed Yaseen. References OWASP Authentication Cheat Sheet — gui...

CVE-2026-98376

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When replacing an inner per-CPU array map within a map-in-map structure, the kernel fails to verify that the replacement map matches the size of the original template map. A local attacker can exploit this flaw by...

CVE-2022-1015

CVE-2022-1015 id uid=1000d gid=1000d groups=1000d ./poc + unshare done table created: leaktable chain created: leakchain rule added Listening on port 9999 table created: leaktable chain created: leakchain rule added Listening on port 9999 kerneladdress: ffffffffb4a00000 kernelstack:...

CVE-2023-40000

CVE-2023-40000 LiteSpeed Cache plugin for WordPress that could enable unauthenticated users to escalate their privileges How does this detection method work? This template looks at the following path: /wp-content/plugins/litespeed-cache/readme.txt Based on the Stable Tag listed, if the version is...

CVE-2017-5123

README Note : The code in this repo is to demo the isolation of secure pod sandbox technologies such as kata containers and does not intend to attack any platforms. How to re-produce Get linux kernel 4.13.0 patch 0001-CVE-2017-5123-help-to-make-attack-safely.patch Build Linux kernel with config...

CVE-2022-1015

CVE-2022-1015 target: linux kernel 5.17.0 config: .config requirements: apt install libmnl-dev libnftnl-dev build: gcc exploit.c -o exploit -lmnl -lnftnl -lpthread -no-pie References...

CVE-2024-50490

CVE-2024-50490 PegaPoll = 1.0.2 - Unauthenticated Arbitrary Options Update Description: The PegaPoll plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in all versions up to, and including, 1.0.2. This...

CVE-2024-34329

CVE-2024-34329 Tested Product: Datacard XPS Card Printer Driver Version: = 8.4 Description: The application is prone to Local Privilege Escalation LPE vulnerability due to insecure file/folder permissions on its default installation, by which it grants the rights for everyone for full control ove...

lxd_root

Privilege Escalation di Linux tramite LXD Panoramica I membri del gruppo locale lxd sui sistemi Linux hanno numerose strade per elevare i propri privilegi a root. Questo repository contiene esempi di exploit locali completamente automatizzati. Una spiegazione dettagliata della vulnerabilità e...

CVE-2024-22198_Checker

CVE-2024-22198 - authenticated remote code execution in Nginx-ui Description This tool made for remote checking your Nginx-ui version and notify if it's vulnerable to CVE-2024-22198. Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by...

CVE-2025-29602

CVE-2025-29602 - Stored cross site scriptingXSS vulnerabilities in the FlatPress CMS 1.3.1 Description A stored Cross-Site Scripting XSS vulnerability exists in the administration panel of Flatpress CMS 1.3.1. An attacker with admin privileges can inject a malicious JavaScript payload into the...

CVE-2022-41446

CVE-2022-41446 Privilege Escalation in Teachers Record Management System using CodeIgnitor Suggested description An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to access and modify user data. Additional Information Proof Of...

CVE-2020-8290

CVE-2020-8290 – Elevación de Privilegios en Backblaze Resumen Nombre: Elevación de Privilegios en Backblaze CVE: CVE-2020-8290 Descubridor: Jason Geffner Vendedor: Backblaze Producto: Backblaze para Windows y Backblaze para macOS Riesgo: Alto Fecha de descubrimiento: 2020-03-13 Fecha de...

CVE-2022-25949

CVE-2022-25949 A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77. 2009..? I reported the issue in January 2014 and was notified of the CVE 8+ years later. I decided to upload this because it is amusing enough to find my old code and that it...

CVE-2024-23997

YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...

CVE-2022-39196-

CVE-2022-39196 Black board CMS Escalation of Privileges Blackboard Learn version 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Additional Information Step 1: Use a student...

CVE-2017-6516-mcsiwrapper-

CVE-2017-6516 CVE-2017-6516 is a privilege escalation vulnerability that targets the .mcsiwrapper binary from MagniCorp SysInfo under version 10-H64. When this binary has the SUID bit set and is outdated, a user may execute arbitrary code as the owner of the binary - which is often root...

CVE-2019-8627

CVE-2019-8627 a kernel information leak on macOS= 10.14.4 =============================== How to reproudce: 1. turn on firewall 2. run the proof of concept as root 3. disconnect Belkin USB-C LAN network and then connect the Belkin USB-C LAN network. after these operations you will get the leaked...