CVE-2026-107202

The h-ui administrative API (version v0.0.25 and below ) is vulnerable to a command injection flaw due to improper validation of the listen configuration field . An authenticated administrator can submit values containing shell metacharacters, which the application then processes using fmt.Sprint...

CVE-2026-107202 CVE-2026-107202

A command injection vulnerability exists in the h-ui version v0.0.25 and below administrative API due to improper validation of the listen configuration field. When an authenticated administrator submits a value containing shell metacharacters, the application constructs nftables/iptables rule...

CVE-2022-20186

针对CVE-2022-20186的漏洞利用 相关分析文章可在此处查阅。这是我在2022年1月报告的Arm Mali内核驱动程序中的一个漏洞。该漏洞可用于从不可信的应用程序域获得任意内核代码执行权限，进而禁用SELinux并获得root权限。 该漏洞利用已在Google Pixel 6上测试，支持从2021年11月到2022年2月的补丁级别。通过更改几个镜像偏移量，可以轻松添加对其他固件的支持。作为参考，我使用了以下命令与ndk-21中的clang进行编译：...

ROOT-OS-ALPINE-318-CVE-2024-28085 CVE-2024-28085 in util-linux - Patched by Root

Root has patched CVE-2024-28085 in the util-linux package for Root:Alpine:3.18. Multiple fixed versions available...

CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

CVE-2026-42618

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file...

ROOT-APP-PYPI-CVE-2025-50182 CVE-2025-50182 in urllib3 - Patched by Root

Root has patched CVE-2025-50182 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

CVE-2024-37081

CVE-2024-37081：VMware vCenter Server 中的多个本地权限提升漏洞 vCenter Server 由于 sudo 配置错误，包含多个本地权限提升漏洞。经过身份验证的拥有非管理员权限的本地用户可能利用这些问题将权限提升为 vCenter Server Appliance 上的 root 权限。 厂商披露： 该漏洞的厂商披露可参见此处。 要求： 此漏洞需要： 能够以配置错误的 sudo 用户或组身份运行系统命令 概念验证： 更多详细信息和利用过程可参见此 PDF。...

CVE-2026-3888-POC-all-from-the-Qualys-platform.

CVE-2026-3888: snapd Local Privilege Escalation PoC Proof of concept for the local privilege escalation vulnerability in snapd CVE-2026-3888. This flaw allows an unprivileged local attacker to elevate their privileges to root on affected Ubuntu systems by recreating the private directory /tmp/.sn...

ROOT-APP-MAVEN-CVE-2024-29857 CVE-2024-29857 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2024-29857 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-5588 CVE-2026-5588 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2026-5588 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-8916 CVE-2025-8916 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2025-8916 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-33202 CVE-2023-33202 in org.bouncycastle:bcprov-jdk15on - Patched by Root

Root has patched CVE-2023-33202 in the org.bouncycastle:bcprov-jdk15on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44492 CVE-2026-44492 in axios - Patched by Root

Root has patched CVE-2026-44492 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-JQH4-M9W3-8HP9 GHSA-jqh4-m9w3-8hp9 in axios - Patched by Root

Root has patched GHSA-jqh4-m9w3-8hp9 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root

Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-GHSA-7CJH-XX4R-QH3F GHSA-7cjh-xx4r-qh3f in io.sentry:sentry-android - Patched by Root

Root has patched GHSA-7cjh-xx4r-qh3f in the io.sentry:sentry-android package for Root:Maven. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-22702 CVE-2026-22702 in virtualenv - Patched by Root

Root has patched CVE-2026-22702 in the virtualenv package for Root:PyPI. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-5435 CVE-2026-5435 in glibc - Patched by Root

Root has patched CVE-2026-5435 in the glibc package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2018-20796 CVE-2018-20796 in glibc - Patched by Root

Root has patched CVE-2018-20796 in the glibc package for Root:Debian:12. Multiple fixed versions available...