CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability

...

CVE-2026-70352

Azure AI Language is affected by a missing authentication vulnerability in a critical function, allowing an unauthorized attacker to elevate privileges over a network . The vulnerability is rated CVSS 10.0 (CRITICAL) with low complexity, no privileges required, no user interaction, and changed sc...

CVE-2026-70178

CVE-2026-70178 is a missing authorization flaw in Microsoft Fabric that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, reflecting high attack complexity and low privileges required , with change...

CVE-2026-70178 Microsoft Fabric Elevation of Privilege Vulnerability

...

POC-Bash-CVE-2021-3560

Bash-CVE-2021-3560 POC Bash -- CVE-2021-3560 Exploit de escalada de privilegios locales en Polkit Este repositorio proporciona un exploit en bash para CVE-2021-3560, una vulnerabilidad de escalada de privilegios locales en polkit que afecta a muchas distribuciones modernas de Linux. !!!!!! En...

GTFOBLookup

GTFOBLookup Offline command line lookup utility for GTFOBins, LOLBAS, WADComs, and HijackLibs. Files .gitignore : Gitignore file gtfoblookup.1 : Linux man page for GTFOBLookup gtfoblookup.py : GTFOBLookup utility LICENSE.md : License file README.md : This file requirements.txt : List of required...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Exploit de omisión de autenticación en Microsoft SharePoint Server Crítico CVSS 9.8 — Escalada de privilegios no autenticada a Administrador de granja en Microsoft SharePoint Server Tabla de contenidos Descripción general Detalles de la vulnerabilidad Versiones afectadas Diagrama...

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP Vulnerabilidad de lectura arbitraria del kernel + EOP de Superfetch basado en reacher de https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . El exploit debe ejecutarse desde integridad baja...

CVE-2026-31431

CVE-2026-31431 "Copy Fail" Toolkit Author: byt3l0rd Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are...

Quiksand-CVE-2023-24012

DDS Security Test ROS 2 DDS security research test environment, based on ROS 2 Foxy. Project Introduction This project demonstrates a privilege escalation vulnerability in the ROS 2 SROS2 security framework. By modifying signed permission files, an attacker can cause a node to subscribe to topics...

backup_dc_registry

Copia de seguridad del registro de Backup Operator para comprometer el dominio Un POC simple que abusa de los privilegios de Backup Operator para volcar de forma remota las hives SAM, SYSTEM y SECURITY. Créditos de la investigación: @filipdragovic Portado del PoC de Windows de @mpgn Uso Esta prue...

NPM: ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree

NPM: ApostropheCMS: Missing destination-parent authorization in page move allows a low-privileged editor to move and re-rank pages inside a restricted subtree vulnerability discovered by ? in WordPress Npm apostrophe versions = 4.31.0...

EUVD-2026-60438

ApostropheCMS: Missing destination-parent authorization in page move allows a low-privileged editor to move and re-rank pages inside a restricted subtree...

json-interop-vuln-labs

JSON Interoperability Vulnerability Labs Description These are the companion labs to my research article "An Exploration of JSON Interoperability Vulnerabilities". Lab 1: Free purchases in an E-commerce Application Key Collision Attacks: Inconsistent Duplicate Key Precedence Inconsistent Large...

CVE-2023-20938-poc

CVE-2023-20938 — Escalada de privilegios UAF en binder de Android Una prueba de concepto de escalada de privilegios local para CVE-2023-20938 , un uso después de liberación use-after-free en el driver binder de Android. Desde un shell sin privilegios obtiene uid 0 y establece SELinux a permisivo ...

CVE-2026-7867-disk2root

Filesystem.Mount → Suplantación de as-user → Omisión de Autorización → Montaje en contexto root → LPE Resumen CVE-2026-7867 es una vulnerabilidad de escalación de privilegios local en udisks2 que involucra el método D-Bus Filesystem.Mount, la opción as-user...

CVE-2026-31431

Description: Cfail is my implementation in C++ x86-64 Assembly of CVE-2026-31431 aka Copyfail, with no dependecy required at all, included libc. In fact, you obtain am universal executable able to run stand-alone on every Linux x86-64 distribution, thanks to a minimal implementation of the standa...

KSuRoot

KSuRoot Herramienta de escalada de privilegios KernelSU con un solo clic basada en la vulnerabilidad del kernel CVE-2026-43499 GhostLock. Esta rama se basa en KSuRoot y está totalmente sincronizada con las actualizaciones principales de Root-My-Galaxy v0.2.6, e incorpora además la función de...

CVE-2023-33730

CVE-2023-33730 — Escalada de Privilegios en eScan Management Console Severidad: Crítica ID CVE: CVE-2023-33730 Divulgado: 30 de mayo de 2023 Autor: Sahil Ojha Tabla de Contenidos Overview Vulnerability Details Impact Technical Analysis Proof of Concept Remediation References Disclaimer Descripció...