CVE-2019-16098

CVE-2019-16098 Micro-Star MSI Afterburner 4.6.2.15658 中的驱动程序（即 RTCore64.sys 和 RTCore32.sys）允许任何经过身份验证的用户读写任意内存、I/O 端口和 MSR。此漏洞可用于权限提升、高权限下的代码执行以及信息泄露。这些经签名的驱动程序还可用于绕过 Microsoft 驱动程序签名策略，部署恶意代码。 更多更新，请访问 CVE-2019-16098 警告 ：硬编码的 Windows 10 x64 Version 1903 偏移量！ root@kitploit: Microsoft Windows...

CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC

CVE-2024-32019 Netdata ndsudo Escalada de Privilegios PoC Resumen CVE-2024-32019 es una vulnerabilidad local de escalada de privilegios en el helper SUID ndsudo de Netdata que permite a un usuario local ejecutar programas arbitrarios como root a través de una ruta de búsqueda no confiable secuest...

CVE-2017-5618-Screen-4.5.0-Root

Exploit de escalada de privilegios local para GNU Screen 4.5.0 CVE-2017-5618 📌 Resumen Exploit de escalada de privilegios local para GNU Screen 4.5.0 que secuestra la carga de bibliotecas compartidas para obtener acceso root mediante la manipulación de ld.so.preload. 🔧 Detalles técnicos...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106209)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106209 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106191 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106184 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

EUVD-2026-71743

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

EUVD-2026-71442

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component...

PT-2026-86231

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description An unauthenticated physical memory disclosure exists in the DirectIo64.sys driver...

PT-2026-86225

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description An improper access control issue exists in the DirectIo64.sys kernel driver. The...

PT-2026-86248

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

PT-2026-86229

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description A privilege escalation issue exists in the DirectIo64.sys driver. Local users can...

CVE-2026-75171

HubCore v.14.1.1 is affected by a privilege escalation vulnerability in its HUBCOREID session cookie handling component , which allows a remote attacker to escalate privileges. No CVSS metrics, patch version, or confirmed exploitation details have been published in the provided documents. The vul...

CVE-2026-71625

ThinkSNS+ v.2.4 (slimkit plus) contains a privilege escalation vulnerability in the ResetPasswordController.php component. A remote attacker can exploit this to escalate privileges, with the referenced advisory further describing the mechanism as account takeover via an expired verification code ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106165 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...

CVE-2026-75160

CVE-2026-75160 is a critical remote privilege escalation vulnerability in MBS Solutions X-Serie Gateway running Firmware V6_00_05 . The vulnerability is exploitable via the web endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi, allowing a remote, unauthenticated attacker to escalate priv...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106186 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106207)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106207 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication GCS. Supported versions that are affected are MySQL...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106210 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...

Linux Distros Unpatched Vulnerability : CVE-2026-84962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized...