CLEANSTART-2026-TI12722 On most platforms, Go uses the given system root certificates

CVE-2026-111943 affects multiple packages. On most platforms, Go uses the given system root certificates. See references for individual vulnerability details...

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Description This project documents my penetration testing engagement as part of the CMIT 386 course at UMGC. It focuses on exploiting the Samba SMB usermapscript vulnerability CVE-2007-2447 on Metasploitable 2...

PwnKit-Vulnerability_CVE-2021-4034

PwnKit Vulnerability - Local Privilege Escalation Title: PwnKit Vulnerability - Local Privilege Escalation Target: Linux Category: Execution Credits: Qualys Research Team Description The Qualys Research Team has discovered a memory corruption vulnerability in polkit’s pkexec, a SUID-root program...

Exploit for CVE-2026-64560

Redmi K90 · CVE-2026-64560 Redmi K90 annibale temporary-r...

CVE-2024-3400-poc

CVE-2024-3400 Vulnerability PoC Proof of Concept Vulnerability Description CVE-2024-3400 is a command injection vulnerability in Palo Alto firewall systems. By crafting a malicious HTTP request, an attacker can execute arbitrary commands on the target server and even gain root privileges...

ROOT-APP-NPM-GHSA-F897-62HF-6GXQ GHSA-f897-62hf-6gxq in @modelcontextprotocol/sdk - Patched by Root

Root has patched GHSA-f897-62hf-6gxq in the @modelcontextprotocol/sdk package for Root:npm. Multiple fixed versions available...

CVE-2025-32463_illdeed

CVE-2025-32463 — sudo -R Privilege Escalation Exploit illdeed Variant This is a refactored proof-of-concept PoC exploit for CVE-2025-32463, a critical vulnerability in sudo versions 1.9.14 through 1.9.17 that allows local privilege escalation to root via sudo -R and a fake NSS module. ⚠️ This...

ROOT-OS-DEBIAN-13-CVE-2026-64685 CVE-2026-64685 in imagemagick - Patched by Root

Root has patched CVE-2026-64685 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-62363 CVE-2026-62363 in imagemagick - Patched by Root

Root has patched CVE-2026-62363 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-62343 CVE-2026-62343 in imagemagick - Patched by Root

Root has patched CVE-2026-62343 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-86420 CVE-2026-86420 in imagemagick - Patched by Root

Root has patched CVE-2026-86420 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

Exploit for CVE-2026-98432

CVE-2026-98432 checker: Linux TCP use-after-free CVSS 9.8 U...

CVE-2025-32463

CVE-2025-32463 Vulnerable: sudo 1.9.14, 1.9.15, 1.9.16, 1.9.17 - Patched in: sudo 1.9.17p1 and later - Legacy versions older than 1.9.14 are not affected, as they don't support the --chroot option. getroot.sh and getroot.py do the same thing. git clone https://github.com/shazed-x/CVE-2025-32463 c...

CVE-2026-115377

A flaw was found in Incus. An attacker controlling a malicious migration source can exploit an arbitrary file write vulnerability by embedding symbolic links symlinks into transferred storage volumes during migration streams. By directing these links to the underlying host filesystem, the attacke...

Cisco ISE - Remote Code Execution

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to...

CVE-2023-5521

CVE-2023-5521 Root takeover via signature spoofing in KernelSU Detailed report https://huntr.dev/bounties/d438eff7-4e24-45e0-bc75-d3a5b3ab2ea1/...

PT-2026-134181

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, advanced/Scripts/utils.sh getFTLPID attempts to validate the pihole-owned /run/pihole-FTL.pid file with expr "$FTL PID" : "^:digit:", but this rejects only values whose...

PT-2026-133466

Name of the Vulnerable Software and Affected Versions OPNsense versions prior to 26.7.8 Description Authenticated users with System: Firmware privileges can execute commands as root by providing a malicious firmware mirror URL. This occurs when shell metacharacters are submitted via the 'POST...

CVE-2026-119334: pi-hole: Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, gravity.sh checks file:// adlist readability with sudo -u pihole test -r but then allows curl, sometimes running as root, to normalize URL dot segments and open a...

CVE-2026-119336: pi-hole: Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.4.2 until 6.5, the root-run advanced/Scripts/updatecheck.sh cron job applies truncate -s 0 and chmod 644 to /etc/pihole/versions while following symbolic links in a directory...