Lucene search
+L

13957 matches found

GithubExploit
GithubExploit
added 2026/04/23 8:56 a.m.308 views

DangXPloit

webOS 6.5.3 Root Exploit Chain 0-day Target: LG Smart T...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/04/23 4:16 a.m.13 views

CVE-2026-41231

Froxlor is open source server administration software. Prior to version 2.3.6, DataDump.add constructs the export destination path from user-supplied input without passing the $fixedhomedir parameter to FileDir::makeCorrectDir, bypassing the symlink validation that was added to all other...

7.5CVSS0.00414EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/04/23 3:52 a.m.42 views

CVE-2026-41231 Froxlor has Incomplete Symlink Validation in DataDump.add() that Allows Arbitrary Directory Ownership Takeover via Cron

Froxlor is open source server administration software. Prior to version 2.3.6, DataDump.add constructs the export destination path from user-supplied input without passing the $fixedhomedir parameter to FileDir::makeCorrectDir, bypassing the symlink validation that was added to all other...

7.5CVSS0.00414EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/22 6:31 p.m.9 views

GHSA-MH5C-XRMH-M794 uutils coreutils has an Untrusted Search Path

A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam after entering the chroot but before dropping root privileges. On glibc-based systems, this can trigger the Name Service Switch NSS to load...

7.8CVSS6.2AI score0.00136EPSS
SaveExploits1References3
NVD
NVD
added 2026/04/22 5:16 p.m.13 views

CVE-2026-35368

A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam after entering the chroot but before dropping root privileges. On glibc-based systems, this can trigger the Name Service Switch NSS to load...

7.8CVSS0.00136EPSS
SaveExploits1References1
Ubuntu
Ubuntu
added 2026/04/22 1:36 p.m.17 views

USN-8197-1: Slurm vulnerability

It was discovered that Slurm did not properly handle access control when dealing with RPC traffic through PMI2 and PMIx, which could allow an unprivileged user to send data to an arbitrary unix socket on the host. An attacker could possibly use this issue to execute arbitrary code as the root use...

9CVSS6.2AI score0.02792EPSS
SaveExploits0
OSV
OSV
added 2026/04/22 1:36 p.m.9 views

USN-8197-1 slurm-llnl vulnerability

It was discovered that Slurm did not properly handle access control when dealing with RPC traffic through PMI2 and PMIx, which could allow an unprivileged user to send data to an arbitrary unix socket on the host. An attacker could possibly use this issue to execute arbitrary code as the root use...

9CVSS6.1AI score0.02792EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/22 11:56 a.m.10 views

USN-8195-1 packagekit vulnerability

It was discovered that PackageKit incorrectly handled certain transactions. A local attacker could use this issue to install arbitrary packages as root, possibly resulting in privilege escalation...

8.8CVSS5.6AI score0.0046EPSS
SaveExploits12References2
RedhatCVE
RedhatCVE
added 2026/04/22 7:22 a.m.10 views

CVE-2026-26951

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflow vulnerability. A high privileged attacker with local access could potentially exploit this...

6.7CVSS6.4AI score0.0013EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/22 7:22 a.m.9 views

CVE-2026-22761

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges...

7.2CVSS6.1AI score0.01159EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/22 7:22 a.m.10 views

CVE-2026-24506

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this...

7.2CVSS6.1AI score0.01191EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/04/22 7:16 a.m.24 views

Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape

A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-5752 , is rated 9.3 on the CVSS scoring system. "Sandbox escape vulnerability in Terrarium allows arbitrary code...

9.3CVSS6.5AI score0.00209EPSS
SaveExploits0
EUVD
EUVD
added 2026/04/22 2:23 a.m.12 views

EUVD-2026-24589

The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session. If the invoking process then exits, the terminal structure may end up containing a pointer to freed memory. A malicious process can abuse the...

8.4CVSS5.7AI score0.00165EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/22 12:00 a.m.12 views

PackageKit 安全漏洞

PackageKit is an open-source system for installing and updating software. Versions 1.0.2 to 1.3.4 of PackageKit contain security vulnerabilities. These vulnerabilities stem from race conditions in transaction flags, which may allow unauthorized users with root privileges to install software...

8.8CVSS7.3AI score0.0046EPSS
SaveExploits12References3
Kaspersky
Kaspersky
added 2026/04/22 12:00 a.m.34 views

KLA91018 Memory handling vulnerability in Linux Kernel

Memory handling vulnerability was found in Linux Kernel. Malicious users can exploit this vulnerability to obtain sensitive information, cause denial of service, gain root privileges. Original advisories Information about the Copy Fail vulnerability Linux CVE announce – CVE-2026-31431 Exploitatio...

7.8CVSS6AI score0.99907EPSS
SaveExploits238References5
GithubExploit
GithubExploit
added 2026/04/21 10:21 p.m.225 views

Exploit for OS Command Injection in Fortinet Fortisandbox

FortiSandbox RCE Scanner — CVE-2026-39808...

9.8CVSS6.3AI score0.92819EPSS
SaveExploits7
RedhatCVE
RedhatCVE
added 2026/04/21 7:23 p.m.10 views

CVE-2026-5752

Sandbox Escape Vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal...

9.3CVSS6.4AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/21 5:41 p.m.41 views

CVE-2026-40604 ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.6, the opfilter Endpoint Security system extension bundle ID uk.craigbass.clearancekit.opfilter can be suspended with SIGSTOP or kill -STOP, or killed with SIGKILL/SIGTERM, by any...

8.2CVSS0.00105EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/21 12:30 p.m.11 views

EUVD-2026-24079

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...

8.7CVSS5.8AI score0.00196EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/04/21 11:52 a.m.119 views

From-Shell-to-Root

🔥 Red Team Notes Pentesting This repository contains real-w...

5.7AI score
SaveExploits0
Rows per page
Query Builder