77602 matches found
CVE-2021-3156
CVE-2021-3156 Introduction This repository was created for studying purpose. The project contains some tools for studying the sudo Baron Samedit vulnerability and the exploit for it. Thanks to Qualys Team for discovering such vulnerability, to Worawit and 0xdevil for the interesting writeups. Usa...
CVE-2026-29955
KubePlus KubeconfigGenerator Command Injection Vulnerability This vulnerability exists in the kubeconfiggenerator component of KubePlus, allowing attackers with HTTP interface access to inject shell commands via the chartName parameter, execute arbitrary code as root within the container, and ste...
CVE-2026-41940-cPanel-Auth-Bypass-Exploit
CVE-2026-41940: cPanel/WHM Authentication Bypass Analysis Vulnerability Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM affecting all currently supported versions. It allows an unauthenticated attacker to bypass authentication and gain root-level access W...
CVE-2026-29114
CVE-2026-29114 β Dahua Exposed Device CA Root Certificate Advisory type: Vendor-coordinated security disclosure CVE ID: CVE-2026-29114 Vendor: Dahua Technology Published: 2026-06-10T05:44:50 UTC Last Modified: 2026-06-10T05:44:50 UTC Source: Dahua Product Security Incident PSI Trust Center Table ...
Important: Red Hat Security Advisory: gvfs security update
An update for gvfs is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
cisco-CVE-2023-20009
About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...
CVE-2019-12185
CVE-2019-12185 eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be...
CVE-2026-41940
CVE-2026-41940 β cPanel/WHM Auth Bypass + Root Password Changer This script exploits an authentication bypass vulnerability in cPanel/WHM CVE-2026-41940 using a CRLF injection technique to forge an administrator session. Once successful, the script can change the root user's password in WHM and...
Code-27-Companion-Hub-Exploits
Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...
Auto-Root-Exploit
Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version 4 all bash...
CVE-2026-76461
β‘ CVE-2026-76461 - Critical SQL Injection A critical, remotely exploitable SQL injection vulnerability in Cisco Secure Email Gateway's email parsing...
CVE-2026-54161
CVE-2026-54161 PoC Summary upsmon interpolates the server-supplied, attacker-controllableups.alarm value, unsanitized, into a shell command that it runs via system. When a monitored device reports an ALARM state and the operator has configured NOTIFYCMD with EXEC on the ALARM event, an ups.alarm...
ROOT-APP-GOBINARY-CVE-2026-79921 CVE-2026-79921 in github.com/rabbitmq/amqp091-go - Patched by Root
Root has patched CVE-2026-79921 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...
CVE-2024-48990-PoC
This simple shell script should create all the required file for this vulnerability to work. First it creates a randomly generated temporary file that will be used to compile the fake init.so file When the vulnerability is triggered. This file will execute and copy the bash binary to /tmp/ribbit...
cPanelSniper
cPanelSniper CVE-2026-41940 β cPanel & WHM Authentication Bypass via Session-File CRLF Injection 4-stage exploit chain Β· Interactive WHM Shell Β· Bulk scanner Β· Pipeline ready Β· stdlib only Overview cPanelSniper is a focused exploitation framework for CVE-2026-41940 , a critical authentication...
MagiskEoP
Introduction This is an exploit for a vulnerability CVE-2024-48336 in Magisk app that allows a local app to silently gain root access without user consent. Vulnerability was initially reported by @vvb2060 and PoC-ed by @canyie. It has been fixed in Canary 27007. Demo video for exploit this...
CVE-2026-31431
Author: 0xShe Language / θ―θ¨ English: https://github.com/0xShe/CVE-2026-31431/blob/main/README.md δΈζ: https://github.com/0xShe/CVE-2026-31431/blob/main/README-CN.md CVE-2026-31431 Kernel Privilege Escalation Tool Guide 0x01 Quick Start Some target environments do not have Python installed, so this...
modrosnlr5
𧬠modrosnlr5 β Linux Kernel LPE PoC CVE-2026-31431 Proof-of-concept tool designed to validate the exploitation of the CVE-2026-31431 vulnerability on Linux systems. The exploit leverages the kernel's AFALG socket interface to inject a payload and obtain a root shell from an unprivileged user...
CVE-2026-31431
CVE-2026-31431 β Local Privilege Escalation via AFALG 2026-04-29 β I am publishing this exploit one day after sharing it on theMyDigitalLife forum. It does not require Python; it is written in C and compiled to the smallest possible size using: musl-gcc -static -Os -o exploit exploit.c -s Critica...
cve-2019-14326
CVEID : CVE-2019-14326 Name of the affected products and versions : Andy all versions up to 46.11.113 Problem type : CWE-284: Improper Access Control Summary Andy is an Android emulator for Windows and Mac. During our tests, we have found open local TCP ports which could be exploited to escalate...