CentOS Linux 6 [TuxCare] Security Update: ca-certificates (CENTOS6:CLSA-2026:1793112288)

The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793112288 advisory. - The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA...

Fedora 45 : btrfs-backup-ng (2026-344a8310cc)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-344a8310cc advisory. notes=Update to 0.9.18, which carries the 0.9.17 security fix GHSA-5xvm-66c9-p5ph and a fix for a regression in 0.9.17. 0.9.17 was not shipped to this releas...

Ubuntu 18.04 OverlayFS Privilege Escalation

Ubuntu version 18.04 Server OverlayFS contains a local privilege escalation vulnerability. This proof of concept demonstrates gaining root privileges through CVE-2021-3493. https://packetstorm.news/download/238658...

Security update for perl-Mozilla-CA (important)

openSUSE security update: security update for perl-mozilla-ca ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22207-1 Rating: important References: bsc1287179 Cross-References: CVE-2026-113812 CVSS scores: CVE-2026-113812 SUSE : 7.4...

Linux Distros Unpatched Vulnerability : CVE-2026-107347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to...

blackbox-pentesting-infsecos

Black-Box Penetration Test — SecOS:1 VulnHub Overview Full black-box penetration test against SecOS:1 , a deliberately vulnerable CTF machine from VulnHub. Objective: simulate a real-world attacker with zero prior knowledge and achieve root-level compromise, evidenced by retrieving /root/flag.txt...

amazon-mustang-hack

AI-assisted project. This research, exploit development, and documentation were produced with AI assistance using the models GLM-5.3 and DeepSeek V4.1 Flash. amazon-mustang-hack Root exploit research for the Amazon Fire 7 9th gen mustang, MT8163, Mali-T720 on the final firmware — Fire OS 7.3.3.1,...

CVE-2026-88533

CVE-2026-88533: Unauthenticated Arbitrary File Write → Root RCE in QAnything CVE ID : CVE-2026-88533 assigned by MITRE, record publication pending Product : QAnything by netease-youdao — open-source RAG / knowledge-base QA platform Affected : v1.4.x through v2.0.0 default branch qanything-v2,...

cve-2026-1668-poc

Proof-of-concept exploit for CVE-2026-1668 This is a proof-of-concept exploit for CVE-2026-1668. It is intended purely for educational purposes only. Please do not attempt to exploit systems that you do not own or do not have explicit permission to exploit. This proof-of-concept was developed...

CVE-2024-3400-Palo-Alto-OS-Command-Injection

Steps : 1. Check whether file 0xr2r.txt is present on device by running below get request or We can verify same by openinig https://domain.com/global-protect/portal/images/0xr2r.txt Url in browser if you get 404 response that means file is not present. POST /ssl-vpn/hipreport.esp HTTP/1.1 Host:...

NimbusPWN-CVE-2022-29799-29800

NimbusPwn — networkd-dispatcher !NOTE Other distros: dnf install gcc dbus-devel pkgconf Fedora/RHEL or pacman -S gcc dbus pkgconf Arch...

CVE-2026-96515

CVE-2026-96515: authenticated root command execution in Netlink HG323RW An authenticated limited web user can upload a shell script through the Netlink HG323RW diagnostic import handler and have the UID-0 BOA process execute it. Authentication and valid verification/CSRF values are required; this...

android-badbinder-demo

CVE-2019-2215 Bad Binder — Exploit Analysis This repository is a small test project for researching the vulnerability CVE-2019-2215 Bad Binder and writing a working prototype of an exploit for Android with a simple graphical interface in Kotlin/Jetpack Compose. In the README I: 1. Describe the...

CVE-2025-32463

CVE-2025-32463 Is a local privilege escalation vulnerability affecting vulnerable versions of sudo. The flaw abuses the sudo -R chroot feature together with the Linux Name Service Switch NSS mechanism to force sudo into loading an attacker-controlled shared library as root. By manipulating...

CVE-2022-4262

CVE-2022-4262 Full Analysis including root cause, PoC and exploit of CVE-2022-4262...

CVE-2026-3888-POC-all-from-the-Qualys-platform.

CVE-2026-3888: snapd Local Privilege Escalation PoC Proof of concept for the local privilege escalation vulnerability in snapd CVE-2026-3888. This flaw allows an unprivileged local attacker to elevate their privileges to root on affected Ubuntu systems by recreating the private directory /tmp/.sn...

CVE-2026-63378

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...

SUDO-privilege-escalation

SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...

CVE-2026-20217

ZendTo 6.15-8 / ClamAV exact-profile RCE and root-variant reproduction This directory is a standalone, authorized-lab reproduction bundle for the no-account ZendTo-to-ClamAV code-execution chain and its separate default- profile Smarty/root-cron continuation. It includes: the complete runnable Po...

-Help-vivo-Y200i-5.10.218-GKI-CVE-2026-43499-stack-reclaim-reaches-0x300-need-0x318

-Help-vivo-Y200i-5.10.218-GKI-CVE-2026-43499-stack-reclaim-reaches-0x300-need-0x318 Device: vivo Y200i PD2354C, Snapdragon 4 Gen 2 SM4450, Android 14 / OriginOS 4 Kernel: 5.10.218-gki-g3a51ea9d5834 39-bit VA, 4K pages, KASLR on, STACKLEAK=y, no SVE Goal: temporary root via CVE-2026-43499 GhostLoc...