CVE-2026-96424

Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — ScadaBR Vulnerability Analysis Technical vulnerability analysis and CVE briefing for CVE-2026-9645 , affecting the open-source ScadaBR SCADA/HMI platform. Overview CVE-2026-9645 is a critical authenticated remote code execution vulnerability in ScadaBR. According to the prepared...

EUVD-2026-102932

Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus...

CVE-2026-96425

The lomiri-download-manager software contains an incorrect DBus policy that allows an arbitrary user to execute arbitrary commands with root privileges over DBus. This vulnerability is classified under CWE-732 (Incorrect Permission Assignment for Critical Resource). The provided documents do not ...

CVE-2026-96424

The lomiri-download-manager suite is vulnerable due to an incorrect DBus policy within the lomiri-upload-manager component. This misconfiguration allows an arbitrary user to perform an arbitrary file read as root over DBus. The vulnerability is classified under CWE-732 (Incorrect Permission Assig...

EUVD-2026-102931

Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus...

Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation

Metasploitable2: Reconnaissance and UnrealIRCd Backdoor Exploitation Disclaimer Metasploitable2 is an intentionally vulnerable virtual machine, published specifically for security training and practice. This project was carried out entirely within an isolated virtual lab that I own and control, f...

CVE-2026-56718

CVE-2026-56718 Unauthenticated path traversal in jdbhttpd/0.1.0 AJCloud AJY IPC firmware allowing remote reading of arbitrary files as root, including cleartext RTSP credentials. CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory Severity: CVSS 4.0 - 8.7 High Affected: AJClou...

CVE-2026-35031

CVE-2026-35031: Jellyfin Subtitle Upload Path Traversal to RCE -darkred?style=flat-square -orange?style=flat-square TL;DR A critical path traversal vulnerability in Jellyfin Media Server allows authenticated users with "Upload Subtitles" permission to upload files to arbitrary locations on disk. ...

Dirty-Frag-Research-CVE-2026-43284-

CVE-2026-43284 Dirty Frag – Linux Kernel Vulnerability Research Overview This repository documents a complete defensive security research project focused on CVE-2026-43284 Dirty Frag , a Linux kernel vulnerability affecting the XFRM/IPsec networking subsystem. The goal of this project is not to...

Lenovo-TB365FC-GhostLock-CVE-2026-43499

GhostLock for Lenovo TB365FC Root for ZUXOS / Android 16 via CVE-2026-43499 rtmutex removewaiter use-after-free plus a DirtyPipe credential patch. Loads a KernelSU LKM without unlocking the bootloader or flashing. Root is lost on reboot. Firmware: ZUXOS 1.5.10.178 Kernel:...

DFRoot

DFRoot — SM-S938B Galaxy S25 Ultra Port · Fast Channel + Manual A fork of diabl0w/DFRoot, specifically ported for the Samsung Galaxy S25 Ultra SM-S938B / pa3q , with the UI and runtime output entirely in Chinese. Two chains, one interface: Method| Vulnerability| Characteristics ---|---|--- Fast...

IPFire_2.25_RCE_Authenticated

IPFire 2.25 Remote Code Execution Authenticated - CVE-2021-33393 This exploit is based on CVE-2021-33393 https://nvd.nist.gov/vuln/detail/CVE-2021-33393 and was built upon the original exploit by Mücahit Saratar https://github.com/KaanaryOverFlow/ipfire-2-25-auth-rce, extending it to achieve a...

NextJS-RCE-Root-Takeover

🚨 Do you know how to get RCE with Next.js 16.0.6 then privilege escalation with python3? 🚨 Let me teach you from a real lab from TryHackMe "Love at First Breach 2026" competition Advanced Track... 📄 Full Report Here: 🔥 Inside: CVE-2025-55182 → Shell PoC → Privilege Escalation → Root + Remediation...

CVE-2020-2038

CVE-2020-2038 Exploit to capitalize on vulnerability CVE-2020-2038. According to Palo Alto Networks: An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS...

flow_divert-heap-overflow

flowdivert-heap-overflow flowdivert-heap-overflow is a proof-of-concept exploit for CVE-2016-1827, which was patched in OS X El Capitan 10.11.5 and iOS 9.3.2. The vulnerability is a series of unchecked arithmetic operations on an untrusted length supplied from user space in the function...

cve-2017-12945

CVE-2017-12945 Exploit for CVE-2017-12945 A remote authenticated blind OS command injection vulnerability exists in Mersive Solstice Pods - a wireless collaboration and presentation platform designed by Mersive Technologies Inc. - running versions of the firmware prior to 2.8.4, as...

CVE-2024-23334-PoC

CVE-2024-23334-PoC A proof of concept of the LFI vulnerability on aiohttp 3.9.1. The option 'followsymlinks' can be used to determine whether to follow symbolic links outside the static root directory. When 'followsymlinks' is set to True, there is no validation to check if reading a file is with...

Exploit11.2

Exploit11.2 Exploit iOS 11.2.x by ZIMPERIUM and semi-completed by me. Sandbox escapes on CVE-2018-4087.This checks also of a root access incompleted. You can creat an app to running exploit on your device if you are a developer and turn the root access @. Thanks to: •RaniXCH, Adam Donenfeld,...

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...