CVE-2026-41940

CVE-2026-41940 - WHM/cPanel Authentication Bypass Mass Exploit 📋 Description CVE-2026-41940 is a critical authentication bypass vulnerability in WHM/cPanel that allows attackers to bypass authentication and gain root access to a server without valid credentials. The vulnerability leverages CRLF...

CVE-2023-34039

CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Static SSH key RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ Summary VMWa...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

CVE-2025-49173

CVE-2025-49173 — Escalada de Privilegios Local a Root en macOS 10.9 Investigación Estado: No oficial / Basado en investigación Plataforma: macOS Mavericks 10.9 Impacto: Escalada de Privilegios Local → Root Severidad: Alta Local Este repositorio contiene un proyecto de investigación de seguridad d...

vsftpd-234-backdoor

vsftpd 2.3.4 Backdoor Exploit A small, dependency-free Python 3 exploit for the vsftpd 2.3.4 backdoor CVE-2011-2523. It triggers the backdoor over FTP and drops you into an interactive root shell on the spawned listener. Written as a modern replacement for old exploit scripts which depended on...

network-security-lab

🔬 Network Security Lab A controlled virtual environment simulating real-world attack and defense scenarios 📋 Overview This lab simulates a real-world penetration test and defensive hardening exercise in a fully isolated virtual environment. It demonstrates the full offensive security lifecycle —...

LooneyPwner

LooneyPwner Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions. LooneyPwner is a proof-of-concept PoC exploit tool targeting the critical buffer overflow vulnerability, nicknamed "Looney Tunables," found in the GNU C Library glibc...

CVE-2025-27591-below-

CVE-2025-27591 – Privilege Escalation in Below 1 Introduction Below is a Linux tool for recording and displaying system data such as hardware utilization and cgroup metrics. In versions prior to v0.9.0 , Below’s systemd service runs with root privileges and creates world-writable log directories...

ROOT-APP-MAVEN-CVE-2026-54512 CVE-2026-54512 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54512 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54513 CVE-2026-54513 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54513 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54514 CVE-2026-54514 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54514 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54515 CVE-2026-54515 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54515 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

cheese

适用于 Quest 3/3S 的 Root 漏洞利用（2025 年 8 月 7 日更新及更早版本），基于 CVE-2025-21479。 Magisk、Cheese 和 Termux 带有 root shell 的截图 警告： Root 是危险的。如果你将 Quest 3/3S 变砖，将无法修复。 此操作在临时 root 状态下会禁用所有安全机制。 不要运行你不可信的应用程序或浏览你不可信的网站。 不要写入 boot 或 system 分区。否则你会变砖。 不要使用 Magisk 的“安装”功能。 你可能希望在 root 后备份你的 deviceKey、Meta Access Token...

ROOT-APP-NPM-CVE-2026-18446 CVE-2026-18446 in fast-uri - Patched by Root

Root has patched CVE-2026-18446 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-75899 CVE-2026-75899 in fast-uri - Patched by Root

Root has patched CVE-2026-75899 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-16221 CVE-2026-16221 in fast-uri - Patched by Root

Root has patched CVE-2026-16221 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-13676 CVE-2026-13676 in fast-uri - Patched by Root

Root has patched CVE-2026-13676 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-75975 CVE-2026-75975 in fast-uri - Patched by Root

Root has patched CVE-2026-75975 in the fast-uri package for Root:npm. Multiple fixed versions available...

CVE-2019-15107-Webmin-RCE-PoC

CVE-2019-15107 Webmin RCE PoC A Python proof-of-concept exploit for CVE-2019-15107 - an unauthenticated remote code execution vulnerability in Webmin versions 1.890 through 1.920. Description This vulnerability exists in the /passwordchange.cgi endpoint of Webmin and allows unauthenticated...

cve-2016-6662

Acerca de Una ayuda para explotar CVE-2016-6662 Advertencias Asegúrate de cambiar la IP del atacante en el archivo c antes de compilar Crédito Todo el crédito al descubridor original. Informes aquí:...