CUAHarm

Medición de la nocividad de los agentes que usan computadoras 🤗 Hugging Face 📄 Paper 📋 Introducción CUAHarm es un punto de referencia diseñado para evaluar los riesgos de seguridad de los Agentes que Usan Computadoras CUAs, por sus siglas en inglés: agentes de IA que pueden controlar computadoras...

CVE-2026-80929 sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]

In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cadpid" entry from pidtable to kernreboottable cadpid is global, and killcadpid is only used in the root namespace. However, due to pidtablerootpermissions, a non-root user can unshare pid/user namespaces and...

CVE-2026-81915

Concrete CMS below 9.5.3 has a missing object-level authorization check in the Types::submit() dashboard controller. When updating a Page Type, the controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType(), allowing a signed-in dashboard user a...

CVE-2020-8635

这是什么 Wing FTP Server 6.2.3 - 权限提升 利用 简介 Wing FTP Server v6.2.3 在 Linux、macOS 和 Solaris 平台上对安装目录和配置文件设置了不安全的权限。这允许本地用户随意创建具有完全权限的 FTP 用户，并通过修改系统文件来提升操作系统内的权限。 测试环境 Ubuntu 18.04, Kali Linux 4, MacOS Catalina, Solaris 11.4 x86 利用 root@kitploit: python3 cve-2020-8635.py -t 192.168.0.2:2222 -u...

CVE-2024-27518

CVE-2024-27518 - SUPERAntiSpyware Professional X LPE PoC Esta vulnerabilidad fue descubierta y divulgada por M. Akil Gündoğan del Secunnix Vulnerability Research Team. Este repositorio contendrá la prueba de concepto y los avisos. Detalles: Producto: SUPERAntiSpyware Professional X y todas las...

EUVD-2026-76447

Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The customslot savetemplate endpoint authorizes the request only against the target board instance canEditBoardContents and then persists the client-supplied selectedTemplateOptioncollection verbatim,...

CVE-2026-81911 Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot save_template via Unescaped Summary Description

Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The customslot savetemplate endpoint authorizes the request only against the target board instance canEditBoardContents and then persists the client-supplied selectedTemplateOptioncollection verbatim,...

CVE-2026-79395

An improper authentication vulnerability in the WS-Security wsse:UsernameToken verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote attackers to bypass authentication and execute privileged ONVIF actions including...

CVE-2026-62102

Subscriber Privilege Escalation in Gato GraphQL = 19.2.3 versions...

CVE-2026-62106

Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...

CVE-2026-62089

Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...

GIUDA

GIUDA Obtén un TGS en nombre de otro usuario sin contraseña Escenario: eres administrador local y hay un usuario con sesión iniciada al que quieres suplantar! Cadena: SeTcbPrivilege te permite leer el almacenamiento LSA, extraer la CLAVE DE SESIÓN del TGT y forjar una solicitud pidiendo un TGS;...

CVE-2026-84195

A flaw was found in Kyverno, a policy engine for Kubernetes. This vulnerability allows attackers with low privileges to exfiltrate the admission controller's ServiceAccount token. By directing apiCall requests to external or attacker-controlled endpoints, the token is automatically attached witho...

NoFilter

NoFilter Herramienta para abusar de la Plataforma de Filtrado de Windows para la escalada de privilegios. Puede lanzar una nueva consola como "NT AUTHORITY\SYSTEM" o como otro usuario que haya iniciado sesión en la máquina. Uso root@kitploit: Usage: NoFilter.exe -s SESSIONID Créditos Ron Ben Yizh...

SspiUacBypass

SspiUacBypass Evadiendo UAC con contextos de datagramas SSPI Detalles técnicos completos en -- https://splintercod3.blogspot.com/p/bypassing-uac-with-sspi-datagram.html Demostración...

cve-2026-62737-lab

CVE-2026-62737: del crash a SYSTEM asistido por laboratorio Una continuación del análisis original de CVE-2026-62737 llamada indirecta arbitraria al kernel de ExecutionContext.sys. Convierte el PoC del crash en una cadena de intercambio de tokens funcional que lanza cmd.exe como SYSTEM, pero solo...

CVE-2025-7771

CVE-2025-7771 — Lectura/Escritura arbitraria de memoria física en ThrottleStop.sys Prueba de concepto completa para el controlador ThrottleStop.sys de TechPowerUp CVE-2025-7771. Un controlador de kernel firmado y aún cargable expone lectura y escritura no validadas de memoria física a través de d...

EUVD-2026-76194

Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...

CVE-2026-62089 WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...

CVE-2026-62089

CVE-2026-62089 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Master Addons for Elementor by Pixar Labs, affecting versions from n/a through 3.2.2 . The flaw allows Privilege Abuse , enabling a low-privilege authenticated user to exploit the missing autho...