CVE-2022-37706-LPE-exploit

CVE-2022-37706 Hello guys, this time I'm gonna talk about a recent 0-day I found in one of the main window managers of Linux called Enlightenment https://www.enlightenment.org/. This 0-day gonna take any user to root privileges very easily and instantly. The exploit is tested on Ubuntu 22.04, but...

POC-CVE-2026-0300-exploit

CVE-2026-0300 — PAN-OS User-ID Authentication Portal Buffer Overflow Exploit Critical CVSS 9.3 — Unauthenticated Remote Code Execution in Palo Alto Networks PAN-OS Captive Portal Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure Installatio...

kernel-exploits

Kernel Exploits Various kernel exploits CVE-2021-22555 Linux local root exploit. Updated version of theflow's exploit for CVE-2021-22555. A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This allows an attacker to gain privileges or cause a D...

ediop3PHP

ediop3PHP A PHP CVE-2025-1219 SCANNER. In bash no root...

ROOT-APP-NPM-CVE-2026-2229 CVE-2026-2229 in undici - Patched by Root

Root has patched CVE-2026-2229 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-1528 CVE-2026-1528 in undici - Patched by Root

Root has patched CVE-2026-1528 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-1527 CVE-2026-1527 in undici - Patched by Root

Root has patched CVE-2026-1527 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-1526 CVE-2026-1526 in undici - Patched by Root

Root has patched CVE-2026-1526 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-16729 CVE-2026-16729 in undici - Patched by Root

Root has patched CVE-2026-16729 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-22036 CVE-2026-22036 in undici - Patched by Root

Root has patched CVE-2026-22036 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-12151 CVE-2026-12151 in undici - Patched by Root

Root has patched CVE-2026-12151 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-22150 CVE-2025-22150 in undici - Patched by Root

Root has patched CVE-2025-22150 in the undici package for Root:npm. Multiple fixed versions available...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

CVE-2022-36446

CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 Remote Code Execution Access to the "Software Package Updates" module is required to trigger the vulnerability. Users with access to this module can run commands with root privileges on the system by performing OS Command Injection during a new package...

CVE-2026-119560

OPNsense core versions through 26.7.8 are vulnerable to a configuration injection flaw due to improper neutralization of CRLF sequences (CWE-93). Authenticated users with page-services-ntp-gps or PPS privileges can submit CR/LF characters via services_ntpd_gps.php or services_ntpd_pps.php. This a...

EUVD-2026-113825

OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append ntpd.conf directives by embedding newlines in the fudge and refid fields. Attackers holding the page-services-ntp-gps or PPS privilege can submit CR/LF characters via...

CVE-2026-119424

OPNsense core versions before 26.7.8 are vulnerable to a configuration line injection vulnerability. This issue allows authenticated users possessing wireless-edit privileges to inject arbitrary directives into configuration files by embedding CR/LF characters within WPA fields, such as wpa.ident...

CVE-2024-6387

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ OpenSSH...

CVE-2026-119409

Versions of OPNsense before 26.7.8 are vulnerable to a root command injection vulnerability via the firmware mirror setting. An authenticated user with System: Firmware privileges can execute arbitrary commands as root by submitting shell metacharacters through the POST /api/core/firmware/set end...

EUVD-2026-113793

OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...