CVE-2025-32462

CVE-2025-32462 – sudo POC Script This is a CVE‑2025‑32462 privilege escalation detection script, providing two modes: direct sudo detection and non-privileged user traversal detection. File Structure File| Description ---|--- poc.sh| Vulnerability verification file for CVE-2025-32462 supports bas...

PT-2026-106238

Name of the Vulnerable Software and Affected Versions Canimaan Software ClamXAV versions 3.3 through 3.11 Description A local privilege escalation issue exists in the Privileged Helper Tool. This is caused by a race condition and insufficient file validation, which allows a local attacker to...

CVE-2024-12356

Неаутентифицированное удалённое выполнение кода в BeyondTrust Remote Support и Privileged Remote Access через внедрение аргументов и обход экранирования строк PostgreSQL Этическое предупреждение: Только для исследовательских, образовательных и авторизованных целей тестирования. Пожалуйста, не...

CVE-2021-32160

..| XSS to Privileged user |.. Description : Exploiting a Reflected Cross-Site Scripting XSS attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

CVE-2024-11467

CVE-2024-11467 Операционная система macOS использует службы XPC для базовой межпроцессной связи между различными процессами, например, между демоном XPC Service и привилегированными вспомогательными инструментами сторонних приложений. Клиент VMware Horizon Client при установке регистрирует...

CVE-2026-91078

The TillKit WordPress plugin before 1.0.5 does not require the hard-coded, publicly known PIN of the privileged POS account it creates on activation to be changed before use, and it authenticates its public POS login endpoint on that PIN alone with no identity or capability check, allowing...

EUVD-2026-91944

The TillKit WordPress plugin before 1.0.5 does not require the hard-coded, publicly known PIN of the privileged POS account it creates on activation to be changed before use, and it authenticates its public POS login endpoint on that PIN alone with no identity or capability check, allowing...

beyondtrust-rce-scanner

CVE-2026-1731 — BeyondTrust Remote Support & PRA Pre-auth RCE Overview Critical pre-authentication RCE in BeyondTrust Remote Support and Privileged Remote Access. Unauthenticated remote attacker can execute OS commands. Field| Value ---|--- CVE| CVE-2026-1731 Severity| CRITICAL Product| BeyondTru...

PT-2026-104530

Name of the Vulnerable Software and Affected Versions TillKit WordPress plugin versions prior to 1.0.5 Description The plugin creates a privileged POS account upon activation that uses a hard-coded, publicly known PIN. The system does not require this PIN to be changed before use and authenticate...

MAL-015

MAL-015: Isolation Escape 2 in Ansible Tower Installations of Ansible Tower on certain Rhel 7/8 setups are potentially vulnerable to “Job Isolation” Escapes that allows an attacker to elevate to the “awx” user from outside the isolated environment. The following files/setups can be leveraged by...

Gorsair

Gorsair Gorsair is a penetration testing tool for discovering and remotely accessing Docker APIs from vulnerable Docker containers. Once it has access to the docker daemon, you can use Gorsair to directly execute commands on remote containers. Exposing the docker API on the internet is a tremendo...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

ZeroHVCI

ZeroHVCI - Defeating HVCI without admin privileges or a kernel driver ZeroHVCI accomplishes arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity HVCI protected environments calling without admin permissions or kernel drivers. Features Full non-privileged kernel...

CVE-2026-1731

Сканер BeyondTrust CVE-2026-1731 Профессиональный сканер на Python для обнаружения открытых сервисов BeyondTrust Remote Support / Privileged Remote Access. Разработчик: issam junior Telegram: https://t.me/arabhackerzgroup CVE-2026-1731 — уязвимость удалённого выполнения кода в BeyondTrust...

CVE-2026-5173

🦊 CVE-2026-5173: GitLab WebSocket Unauthorized Method Execution PoC 🛠️ Overview CVE-2026-5173 allows a low-privileged authenticated attacker to call restricted backend methods through GitLab's WebSocket /-/cable endpoint, specifically via the GraphqlChannel. This can lead to sensitive data exposur...

CVE-2025-27840-WIP

CVE-2025-27840-WIP Работа в процессе по CVE-2025-27840 Обзор CVE-2025-27840 CVE-2025-27840 — это уязвимость средней степени серьезности CVSS 6.8, затрагивающая Bluetooth-чипы Espressif ESP32 , которые интегрированы в более чем 1 миллиард IoT-устройств по всему миру. Проблема связана с 29...

CVE-2025-9074-docker-escape

CVE-2025-9074-Docker Escape HTB MonitorsFour This code is for educational purposes only and controlled environments such as laboratories Hack The Box. Do not use on systems without authorization. This repository contains an exploit script for the Docker Remote API exposed without authentication...

CVE-2026-1731

CVE-2026-1731 Blind RCE PoC Effected Versions: Privileged Remote Access : = 24.3.4 Remote Support : = 25.3.1 For further information I recommend you read the analysis by attackerkb.com. How to Build You will need to following tools to build this PoC: Git, rust 1. Clone my repository git clone...

CVE-2026-0628-POC

CVE-2026-0628-POC Proof of Concept PoC for CVE-2026-0628, demonstrating script injection into privileged pages through the use of the tag in Google Chrome. This vulnerability, classified as CWE-862 Missing Authorization, allows a malicious extension to bypass security policies in versions prior t...

CVE-2026-34621_PDF_SAMPLE

Technical Analysis of a Multi-Stage Adobe Acrobat PDF JavaScript Sample Overview This repository publishes a code-centric reverse-engineering write-up on a malicious PDF sample that embeds staged Adobe Acrobat JavaScript. The analyzed sample uses a hidden form field as its initial loader,...