CVE-2026-82346

A potential privilege escalation vulnerability was identified in HP ImageDiags , affecting versions prior to 5.0.0.36 . The root cause is insufficient access controls , which could allow a local attacker with low privileges and active user interaction to escalate to higher system access. The assi...

CVE-2026-82346 HP ImageDiags - Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

EUVD-2026-68801

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2022-0441

CVE-2022-0441 root@kitploit: Title: WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation Date: 16.02.2022 Author: Numan Türle CVE: CVE-2022-0441 Software Link: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/ Version: 2.7.6 Installation...

CVE-2019-10915

La vulnerabilidad es un bypass de autenticación en el servidor TIA Administrator. Un atacante podría ejecutar comandos arbitrarios de la aplicación a través de websockets en el servidor node.js que está expuesto externamente por defecto. Al explotar esta vulnerabilidad, un atacante remoto no...

CVE-2026-81297

Fluent Forms Pro Add On Pack is a WordPress plugin affected by a Subscriber Privilege Escalation vulnerability in versions ≤ 6.2.12 , as discovered by Ananda Dhakal (Patchstack). The CVSS 3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-based attac...

EUVD-2026-68782

Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...

CVE-2026-81297 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...

CVE-2018-1000199

CVE-2018-1000199 El código de ptrace en Linux virtualiza el acceso a los registros de depuración, y el código de virtualización tiene un manejo de errores incorrecto. Esto significa que si escribes un valor ilegal en, por ejemplo, DR0, el estado interno del seguimiento de puntos de interrupción d...

Leantime-POC

Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 Description The following vulnerabilities were identified in version 3.0.6 of the Leantime goals focused project management system. CVE-2024-27474 A cross-site request forgery CSRF vulnerability which, when triggered, would create and...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$...

CVE-2026-11551-PoC

CVE-2026-11551 - Privilegio no autenticado en White Label & Branding, Free Login Page Customizer White Label & Branding, Free Login Page Customizer update $wpdb-users, $data, ... ← Line 2515: DOUBLE HASH TERSIMPAN Código vulnerable inc/modules/login-screen/signup-password.php:230-2...

KrbRelay

KrbRelay Relaying 3-headed dogs. More details at https://googleprojectzero.blogspot.com/2021/10/windows-exploitation-tricks-relaying.html and https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html This should be working on most fully patched Windows systems...

CVE-2019-0803

CVE-2019-0803 Win32k 特権昇格 Poc スクリーンショット 参考 （セキュリティトークンの窃取） https://github.com/mwrlabs/CVE-2016-7255...

cve-2026-31431-checker

CVE-2026-31431 "Copy Fail" — Vulnerability Detection Script Shell-based scanner for CVE-2026-31431 "Copy Fail" , a local privilege escalation vulnerability in the Linux kernel's cryptographic subsystem algifaead / AFALG interface. An unprivileged local user can write 4 bytes into the in-memory pa...

CVE-2024-22120-RCE

CVE-2024-22120 ToolKit Affected Version/s root@kitploit: 6.0.0 - 6.0.27 6.4.0 - 6.4.12 7.0.0alpha1 Credit https://x.com/mf0cuz https://support.zabbix.com/browse/ZBX-24505 https://packetstormsecurity.com/files/137454/Zabbix-3.0.3-Remote-Command-Execution.html Premise a low-privilege user Have...

CVE-2023-21752

CVE-2023-21752 PoC for arbitrary file delete vulnerability in Windows Backup service. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 This repo contains two exploits: v1 - Just perform file delete of user choice v2 - Tries to abuse arb delete to spawn elevated cmd shell not...

CVE-2022-42046

EvilWfshbr CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation wfshbr64.sys and wfshbr32.sys specially crafted payload allows arbitrary user to perform bitwise operation with arbitrary EPROCESS offset and flags value to purposely elevate the game process to CodeGen Full...

CVE-2020-0041

CVE-2020-0041 Este repositorio contiene el código para explotar CVE-2020-0041, un fallo que reportamos a Google en diciembre de 2019 y que fue corregido en el Boletín de Seguridad de Android de marzo de 2020. Puedes encontrar el exploit de escape del sandbox en sandbox/. El análisis del fallo y e...

CVE-2023-28229

CVE-2023-28229 Windows CNG KeyIso RPC EoP/SBX Discovered by: @k0shl Reference: https://whereisk0shl.top/post/isolate-me-from-sandbox-explore-elevation-of-privilege-of-cng-key-isolation If compilation fails, rename rpc.h to something else because I didn't realise rpc.h is a standard include in...