79247 matches found
CVE-2026-119560 OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields
OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append ntpd.conf directives by embedding newlines in the fudge and refid fields. Attackers holding the page-services-ntp-gps or PPS privilege can submit CR/LF characters via...
EUVD-2026-113825
OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append ntpd.conf directives by embedding newlines in the fudge and refid fields. Attackers holding the page-services-ntp-gps or PPS privilege can submit CR/LF characters via...
CVE-2026-119560
OPNsense core versions through 26.7.8 are vulnerable to a configuration injection flaw due to improper neutralization of CRLF sequences (CWE-93). Authenticated users with page-services-ntp-gps or PPS privileges can submit CR/LF characters via services_ntpd_gps.php or services_ntpd_pps.php. This a...
CVE-2026-119424
OPNsense core versions before 26.7.8 are vulnerable to a configuration line injection vulnerability. This issue allows authenticated users possessing wireless-edit privileges to inject arbitrary directives into configuration files by embedding CR/LF characters within WPA fields, such as wpa.ident...
CVE-2026-119409 OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting
OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...
CVE-2026-119409 OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting
OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...
CVE-2026-119409
Versions of OPNsense before 26.7.8 are vulnerable to a root command injection vulnerability via the firmware mirror setting. An authenticated user with System: Firmware privileges can execute arbitrary commands as root by submitting shell metacharacters through the POST /api/core/firmware/set end...
EUVD-2026-113793
OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...
CVE-2026-119409 OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting
OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...
CVE-2021-3560
CVE-2021-3560 - Polkit Local Privilege Escalation ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author @UNICORDev by @NicPWNs and @Dev-Yeoj Description It was found that polkit could be tricked into bypassing the...
CVE-2025-46811
SUSE Manager Exploit Toolkit CVE-CVE-2025-46811 Scanner & Exploiter 🚀 Features Multi-threaded vulnerability scanning Interactive root shell via WebSocket Single command execution mode Colored debug output Batch processing of targets 📦 Installation git clone...
cve-2017-11176
cve-2017-11176 Local Privilege Escalation develope on ubuntu 4.4.0-62 kernel about My first try to code my own LPE exploit. developement line c2bbad5f471ef2b112f343fde1f4e7ff94fe28d1 triger kernel uaf d2872d5c0d642e20c807a960f99d9533dde5d809 now,we can use another thread to unblock main thread...
ROOT-APP-NPM-GHSA-VCVR-R3JV-PC5J GHSA-vcvr-r3jv-pc5j in next - Patched by Root
Root has patched GHSA-vcvr-r3jv-pc5j in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-26007 CVE-2026-26007 in cryptography - Patched by Root
Root has patched CVE-2026-26007 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-39892 CVE-2026-39892 in cryptography - Patched by Root
Root has patched CVE-2026-39892 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-537C-GMF6-5CCF GHSA-537c-gmf6-5ccf in cryptography - Patched by Root
Root has patched GHSA-537c-gmf6-5ccf in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34073 CVE-2026-34073 in cryptography - Patched by Root
Root has patched CVE-2026-34073 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-1525 CVE-2026-1525 in undici - Patched by Root
Root has patched CVE-2026-1525 in the undici package for Root:npm. Multiple fixed versions available...