1427 matches found
CVE-2025-0401
CVE-2025-0401 - Local Privilege Escalation via SUID Binary Abuse Summary CVE-2025-0401 is a local privilege escalation vulnerability discovered in systems where the /usr/bin/passwd binary is misconfigured, allowing unintended root-level access when combined with specific syscall sequences. This...
CVE-2025-32463
Exploit CVE-2025-32463 Panoramica Questo repository fornisce un tool di exploit basato su Go per CVE-2025-32463 , una vulnerabilità critica di escalation dei privilegi locali CVSS 9.3 nelle versioni di sudo 1.9.14 fino a 1.9.17. Consente a utenti locali non autorizzati di ottenere accesso root...
PT-2026-83366
Name of the Vulnerable Software and Affected Versions IGEL OS 12 versions prior to 12.9.0 IGEL OS 12 version 12.8.3 LTS IGEL OS 11 versions prior to 11.11.150 Description A secure boot bypass exists in the GRUB boot stage. A physically present attacker can gain unauthorized root access by placing...
Exploit for Use After Free in Google Android
CVE-2019-2215 Temproot for Pixel 2 and Pixel 2 XL via CVE-...
Exploit for OS Command Injection in Totolink N600R_Firmware
CVE-2022-28906 PoC Python proof of concept for unauthenticate...
tplink-archer-root-exploit
TP-Link Archer AX73 / AX10 — Root Shell Exploit Auto-Mail L...
Exploit for CVE-2026-41567
CVE-2026-41567 1day One day for Docker Escape CVE-2026-41567...
CVE-2026-52817
Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...
CVE-2026-52817 Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation
Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...
CVE-2026-52817 Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation
Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...
CVE-2026-52817 Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation
Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...
CVE-2026-52817
In Linuxfabrik Monitoring Plugins prior to 5.1.0, the Debian.sudoers file allowed the nagios/icinga account to run /usr/bin/apt-get as root with unrestricted arguments. An attacker with the monitoring account can execute sudo apt-get update -o APT::Update::Pre-Invoke::="/bin/sh" to obtain a root ...
CVE-2026-52817: Improper Neutralization of Argument Delimiters in a Command
Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx
FreePBX: From Unauthenticated SQL Injection to Root Shell...
CVE-2026-67966
Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...
CVE-2026-67966
Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...
CVE-2026-67966
The Tenda W20E V5.0 wireless router (running firmware US_W20EV5.0qu_V16.01.0.6(2782)_CN&EN_TDE01.bin) is vulnerable to an unauthenticated remote attack via the /goform/telnet endpoint. This vulnerability allows an attacker to activate the Telnet daemon and install iptables rules that expose port ...
PT-2026-76794
Name of the Vulnerable Software and Affected Versions Tenda W20E version V16.01.0.62782 Description The '/goform/telnet' endpoint allows unauthenticated remote attackers to activate the Telnet daemon, which enables them to obtain root shell access to the device. Recommendations At the moment, the...
