79753 matches found
CVE-2026-63378
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...
SUDO-privilege-escalation
SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...
CVE-2026-20217
ZendTo 6.15-8 / ClamAV exact-profile RCE and root-variant reproduction This directory is a standalone, authorized-lab reproduction bundle for the no-account ZendTo-to-ClamAV code-execution chain and its separate default- profile Smarty/root-cron continuation. It includes: the complete runnable Po...
-Help-vivo-Y200i-5.10.218-GKI-CVE-2026-43499-stack-reclaim-reaches-0x300-need-0x318
-Help-vivo-Y200i-5.10.218-GKI-CVE-2026-43499-stack-reclaim-reaches-0x300-need-0x318 Device: vivo Y200i PD2354C, Snapdragon 4 Gen 2 SM4450, Android 14 / OriginOS 4 Kernel: 5.10.218-gki-g3a51ea9d5834 39-bit VA, 4K pages, KASLR on, STACKLEAK=y, no SVE Goal: temporary root via CVE-2026-43499 GhostLoc...
CVE-2026-46368-OpenWrt-Exploit
OpenWrt luci-app-https-dns-proxy Authenticated Command Injection CVE-2026-46368 This repository contains the Proof of Concept PoC exploit for a critical OS command injection vulnerability in luci-app-https-dns-proxy that results in arbitrary command execution as root. CVE ID: CVE-2026-46368...
FEP3370-advanced-ethical-hacking
DynoRoot CVE-2018-1111 Final project for the course Advanced Ethical Hacking at KTH, Stockholm This project demonstrates a known vulnerability of Fedora and RedHat machines related to an unsafe client-side implementation of the Dynamic Host Configuration Protocol DHCP. A rogue DHCP server can cra...
CVE-2026-78745
CVE-2026-78745 — Remote Code Execution via Android Debug Bridge ADB CVE-2026-78745 affects HiDPT / Weyon HiDPTAndroid devices using the Hi3751V350 and Hi3751V352EDMO platforms. The vulnerability allows a remote attacker to execute arbitrary code through the Android Debug Bridge adbd daemon...
CVE-2026-43499-T807D
T807D Final Artifacts — Source One-to-One Correspondence Recovery Package Generated: 2026-08-08 Conclusion This directory has organized the complete popsicle source tree, necessary header files, embedded su payload, production binaries, and runtime scripts that can be recovered from the current...
CVE-2026-11318
CVE-2026-11318: Local Privilege Escalation in DeskIn macOS Client Vendor: DeskIn Product: DeskIn macOS Client Affected Versions: = v3.3.4.3 Overview A Local Privilege Escalation LPE vulnerability has been identified in the DeskIn macOS client. This vulnerability allows an unprivileged local user ...
CVE-2026-67401-cPanel-EmailTrack-SQLi
CVE-2026-67401 — cPanel & WHM EmailTrack SQL Injection → Root RCE IOC Scanner, Mitigation Tool & Remediation Guide for the cPanel EmailTrack SQL Injection Vulnerability Keywords: CVE-2026-67401, cPanel exploit, cPanel SQL injection, WHM vulnerability, EmailTrack SQLi, Track Delivery SQL injection...
CVE-2025-32463_chwoot
🛠️ CVE-2025-32463chwoot - Securely Handle Privileges in Linux 📋 Overview CVE-2025-32463chwoot helps you understand and deal with a specific security vulnerability related to privilege escalation in Linux systems. This tool allows users to explore and test the escalation of privilege to the root...
Exploit for CVE-2026-61515
CVE-2026-61515 — Puwell IP Camera: RCE через DebugShell на TCP...
CVE-2026-63378 TAKO AI Agent for Okta: Authenticated Python execution through validator bypass
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...
CVE-2026-63378 TAKO AI Agent for Okta: Authenticated Python execution through validator bypass
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...
CVE-2026-63378
Prior to version 3.0.1-beta , the TAKO AI Agent for Okta is vulnerable to code injection (CWE-94). Authenticated users with a valid fctr_session cookie can submit arbitrary Python source in the script_code field of POST /api/react/execute-script without administrator privileges. The vulnerability...
CVE-2026-63378 TAKO AI Agent for Okta: Authenticated Python execution through validator bypass
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...
EUVD-2026-114542
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...
Exploit for CVE-2014-9583
CVE-2014-9583 — ASUSWRT infosvr: pre-auth RCE через UDP/9999...
CVE-2026-52199
CVE-2026-52199 : Unauthenticated Remote Code Execution in UZ801 4G Router Vulnerability Summary A critical Incorrect Access Control vulnerability exists in the Generic OEM UZ801v2.1 4G LTE Router Firmware V3.4.3. The device improperly exposes an unauthenticated Android Debug Bridge ADB daemon...