c-CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

CVE-2024-0044

CVE-2024-0044 Resumen CVE-2024-0044 es una vulnerabilidad descubierta en ciertas aplicaciones Android que permite a los atacantes escalar privilegios explotando una falla en el comando run-as. Esta vulnerabilidad puede explotarse mediante la creación de un payload específico que otorga acceso no...

CVE-2026-89000 WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Run

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a user-supplied feed URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to internal-only...

CVE-2026-89000

The WPeMatico RSS Feed Fetcher WordPress plugin (versions before 2.8.27 ) is vulnerable to Server-Side Request Forgery (SSRF) . The application fails to perform adequate capability checks or validate the destination of user-supplied feed URLs before fetching them server-side. This allows users wi...

CVE-2026-5029-Exploit

🔥 CVE-2026-5029 — Code Runner MCP Server RCE Unauthenticated Remote Code Execution via the run-code MCP Tool Proof of Concept exploit for CVE-2026-5029 — a critical unauthenticated Remote Code Execution vulnerability in Code Runner MCP Server, triggered via therun-code MCP tool when the server is...

CVE-2023-36123

CVE-2023-36123 For demonstration purposes only. Exploit works on all Versions of Plain Craft Launcher 2. Download Custom.xaml and import into Plain Craft Launcher 2,then click "Run Command". https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb123783...

vulnerability-in-Remix-React-Router-CVE-2025-31137-

overview after reading write up of @zhero in his personal blogpost i decide to build this CTF to learn how things work and after that i decide to share it with anybody who wants to learn how exploit this vulnerability , i try to make CTF with [email protected] version but when i check...

CVE-2026-96526 MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route

The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing users with the Contributor role to disclose the title and publication status of any post, page or custom post type, including other users'...

Chrome-Forensic_CVE-2024-0044

🔍 Chrome Forensic - CVE-2024-0044 A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices Features • Installation • Usage • Documentation 👤 Author Information Author: JackTekno GitHub: github.com/JackTekno 📋 Overview This tool utilizes the...

CVE-2026-63204

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent permissions can supply an arbitrary AI analytics run identifier to the ticket summarize endpoint and receive the AI provider error message stored for that run, even if the run...

zoshrinkC2

MeliziaC2 DNS over HTTPS targeted malware only runs once ! Some functions are not available yet ! ! WIP, don't use in production ! Key Features Auto-delete malware on failure Fully encrypted per victim RSA key DoH DNS-over-HTTPS communication Malware only runs once! Diagram Images Requires...

CVE-2026-63204

In Zammad versions prior to 7.1.2 , an authenticated user with agent permissions can exploit a vulnerability in the ticket summarize endpoint . By supplying an arbitrary AI analytics run identifier , an attacker can retrieve the AI provider error message associated with that run. This allows the ...

CVE-2026-63204 Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent permissions can supply an arbitrary AI analytics run identifier to the ticket summarize endpoint and receive the AI provider error message stored for that run, even if the run...

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

Lenovo IdeaTab A1000G — Root Note: This documentation and exploit code was generated with AI assistance Kiro. Verify before use — AI can and does make mistakes. Device Field| Value ---|--- Model| Lenovo IdeaTab A1000G SoC| MediaTek MT8317 = MT6517 CPU| Dual-core Cortex-A9 @ 1.2GHz Kernel| Linux...

miasma-toolkit

Miasma / Shai-Hulud toolkit Incident analysis + detection/remediation tooling for the Miasma worm a Mini Shai-Hulud variant that injects auto-run payloads into AI-agent / IDE configs and npm/GitHub repos. ⚠️ Disclaimer — no warranty. This is a community defensive toolkit provided "as is" , without...

GHSA-8V8H-HG4W-MVQ2 hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

Impact Users of the python-hyper/hpack library, most commonly used as downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blockin...

EUVD-2026-85712

hpack: Unbounded variable integer decoding can cause run-away computation on malformed input...

CVE-2021-4034

CVE-2021-4034 Este es un POC para la vulnerabilidad encontrada en el binario pkexec de polkit, que se utiliza para ejecutar programas como otro usuario. Para un estudio en profundidad: https://access.redhat.com/security/vulnerabilities/RHSB-2022-001 Ejecución gcc poc.c -o poc && ./poc...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 version available for CentOS 8 Based on modifications from https://github.com/berdav/CVE-2021-4034/tree/main/dry-run Usage Modify the system function in pwnkit-dry-run.c to execute custom commands by default it adds a r00t user with password XHSZWCPU6Nvobe Run make to...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Exploit CVE-2024-0044 Android privilege escalation to download arbitrary target app sandbox files. Usage ./CVE-2024-0044.sh Parameters Path to any local APK file Target app package name Example ./CVE-2024-0044.sh /path/to/target.apk com.target.mobile Description 1. Applicable...