79275 matches found
GeoVision SNMPv3 authKey injection root RCE
LAPI Digest admin: szAuthKey injected into net-snmp-config system sink classic '; cmd ; ' on TBL4700. """GeoVision GV-TBL4700 — SNMPv3 User Config → net-snmp-config Command Injection → Root RCE""" from future import annotations import json from kittysploit import from lib.protocols.http.httpclien...
ksqlDB unauthenticated CREATE SINK CONNECTOR cron root RCE
UNAUTH POST /ksql creates FileStreamSinkConnector writing /etc/cron.d/; produce cron line on Kafka topic 9092 for root execution. !/usr/bin/env python3 -- coding: utf-8 -- """Confluent ksqlDB unauthenticated FileStreamSinkConnector cron root RCE.""" from future import annotations import json impo...
MultiTech Conduit import_config filename command injection RCE
Authenticated POST /api/command/uploadconfig with malicious filename breaks out of importconfig shell quoting. """MultiTech Conduit AEP importconfig filename command injection root RCE.""" from future import annotations import json from kittysploit import from lib.protocols.http.httpclient import...
Lantronix EDS FsUnmount command injection
Authenticated POST /FsUnmount with newline/breakout in path reaches ltrxusbumount → /bin/sh -c root. !/usr/bin/env python3 -- coding: utf-8 -- """Lantronix EDS FsUnmount path parameter command injection.""" from future import annotations import re from urllib.parse import urlencode from kittysplo...
Lantronix EDS3000PR SSL passin command injection
Authenticated POST /ssl with certpasswd/keypasswd injected into openssl -passin pass:%s system enables root command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Lantronix EDS SSL -passin pass:%s command injection RCE.""" from future import annotations import re import time from...
mySCADA PRO Runtime unauthenticated upgrade command injection root RCE
POST /s.fcgi?upgrade= with X-File directory triggers systemchmod 777 /opt/myscada/fw/ as root. """mySCADA PRO Runtime unauthenticated /s.fcgi upgrade branch command injection.""" from future import annotations import re from urllib.parse import quote from kittysploit import from lib.exploit.handl...
KeyHelp Apache ErrorLog pipe directive root RCE
Authenticated admin injects apachehttpdirectives ErrorLog pipe; KeyHelp cron renders vhost and Apache reload runs command as root. !/usr/bin/env python3 -- coding: utf-8 -- """KeyHelp authenticated Apache ErrorLog pipe directive root RCE.""" from future import annotations import os import re impo...
Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upl — Detect
Fingerprint / reachability check for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upload Branch CWE-22 Leading to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLin...
ROOT-APP-MAVEN-CVE-2026-34479 CVE-2026-34479 in org.apache.logging.log4j:log4j-1.2-api - Patched by Root
Root has patched CVE-2026-34479 in the org.apache.logging.log4j:log4j-1.2-api package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-68161 CVE-2025-68161 in org.apache.logging.log4j:log4j-core - Patched by Root
Root has patched CVE-2025-68161 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-34480 CVE-2026-34480 in org.apache.logging.log4j:log4j-core - Patched by Root
Root has patched CVE-2026-34480 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-34477 CVE-2026-34477 in org.apache.logging.log4j:log4j-core - Patched by Root
Root has patched CVE-2026-34477 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...
RLSA-2026:89849 Important: flatpak security update
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary write in root context via pat...
flatpak security update
An update is available for flatpak. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak is a system for building, distributing, and running sandboxed deskto...
RLSA-2026:89850 Important: flatpak security update
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary write in root context via pat...
flatpak security update
An update is available for flatpak. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak is a system for building, distributing, and running sandboxed desktop...
RLSA-2026:89859 Important: flatpak security update
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary write in root context via pat...
flatpak security update
An update is available for flatpak. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak is a system for building, distributing, and running sandboxed desktop...
ghostlock-apk
GhostLock APK Standalone APK: CVE-2026-43499 GhostLock kernel privilege escalation + execution as Shizuku shell identity. Prerequisites Honor AAK-AN00 / MagicOS 10 / Linux 6.6.89 / 4KB page Shizuku installed and started via adb adb shell sh /sdcard/Android/data/moe.shizuku.privileged.api/start.sh...