Gombruc

Gombruc privilege escalation for linux all versions This vulnerability is related to CVE-2025-0401, which affects all Linux systems. With the help of this bash script, you can give your user any level of access, up to and including Root access. Warning: This exploit is for educational purposes on...

metasploitable2-vsftpd-exploitation

Metasploitable 2 - Laboratorio de Explotación de vsFTPd 2.3.4 Resumen Este proyecto demuestra un flujo de trabajo de pruebas de penetración contra una máquina deliberadamente vulnerable, Metasploitable 2. El objetivo fue identificar, explotar y analizar una vulnerabilidad conocida en el servicio...

CVE-2021-3064

CVE-2021-3064: Desbordamiento de búfer remoto en Pan-OS + Contrabando HTTP Exploit Este exploit utiliza una vulnerabilidad de contrabando HTTP para entregar un payload a un endpoint que de otro modo sería inaccesible en firewalls Pan-OS; el endpoint es vulnerable a un desbordamiento que puede ser...

CVE-2021-3560-EXPLOIT

Description As part of my cybersecurity thesis I wanted to create an exploit for a vulnerability. I HIGHLY recommend reading this guide, as this exploit is based on it: https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ Also, check out this repo, as i took...

EUVD-2026-66332

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended...

CVE-2026-38577-by-deepak-Anmol

CVE-2026-38577 — Tenda HG21 Hardcoded Root Credentials Summary Field| Value ---|--- CVE ID| CVE-2026-38577 Vendor| Tenda Product| Tenda HG21 XPON Fiber Modem Affected Version| V4.0.0-260302 Product Key| HG21-V1.0-TDE01 Hardware Version| V1.0 Firmware Build Date| 2026-03-02 Firmware File|...

PT-2026-85033

Name of the Vulnerable Software and Affected Versions Plesk versions 18.0.79.9 and earlier Plesk versions 18.0.80 through 18.0.80.5 Description A path traversal issue allows local users to execute arbitrary code with root privileges. Path traversal is a flaw that allows an attacker to access file...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 — GNU Inetutils Telnetd Authentication Bypass...

CVE-2026-67394

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access or allowed to change their own shell access to...

EUVD-2026-68922

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...

Palo Alto GlobalProtect App MacOS 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h13 / 6.3.x < 6.3.3-h14 Multiple Vulnerabilities (Global Un-Protect)

The version of Palo Alto GlobalProtect App installed on the remote macOS host is 6.0.x prior to 6.0.15, 6.2.x prior to 6.2.8-h13, or 6.3.x prior to 6.3.3-h14. It is, therefore, affected by multiple vulnerabilities collectively known as Global Un-Protect: - Local privilege escalation vulnerabiliti...

PT-2026-84247

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An OS Command Injection issue exists where an authenticated user with limited privileges can execute arbitrary commands with root privileges. OS Command Injection is a flaw that allow...

CVE-2026-38577

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access...

CVE-2026-38577

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access...

CVE-2026-38577

Tenda HG21 router (version V4.0.0-260302 ) contains insecure hardcoded credentials in its Admin account, allowing a remote, unauthenticated attacker to gain root access to the device. The CVSS 3.1 score is 9.8 (Critical) with a network attack vector and no required privileges. CISA's SSVC assessm...

EUVD-2026-68879

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access...

CVE-2026-82457 su-exec through 0.3 Privilege Escalation via Numeric User ID

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uidt and gidt, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target...

CVE-2026-82457 su-exec through 0.3 Privilege Escalation via Numeric User ID

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uidt and gidt, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target...

EUVD-2026-67962

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

CVE-2026-82018

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...