SkyWrapper

Overview SkyWrapper is an open-source project which analyzes behaviors of temporary tokens created in a given AWS account. The tool is aiming to find suspicious creation forms and uses of temporary tokens to detect malicious activity in the account. The tool analyzes the AWS account, and creating...

CVE-2024-9950-PoC

CVE-2024-9950-PoC Forescout SecureConnector = 11.3.07 Detail My Blog Info Vulnerability: Creation of Temporary Script in Directory with Insecure Permissions Severity: Medium to High Vector: Local Windows OS machine Attack Complexity: Low Privileges Required: Low Categories: Local Privilege...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser. What can an instantbox do? 1. provides a clean Linux environment for a presentation 2. let...

tmpmail

A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...

CVE-2026-119193

A flaw was found in PHPUnit. On multi-user systems sharing a common temporary directory, the framework reuses a predictable temporary folder during code coverage tests without verifying ownership or permissions. A local attacker can pre-create the directory and substitute test files, leading to...

CVE-2026-68524

A flaw was found in Apache OFBiz. An unauthenticated remote attacker can exploit improper temporary file handling by accessing an open file descriptor and injecting a file URI Uniform Resource Identifier. This issue allows the attacker to force the application to load an attacker-controlled scree...

CVE-2026-54584

A flaw was found in mport, the MidnightBSD Package Manager. When extracting package metadata, mport used temporary directories that could be controlled by the environment, even when operating with elevated privileges. An attacker who can control the environment during a privileged mport operation...

CVE-2026-68524

An unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, and inject a "file:" URI to cause OFBiz to load an attacker-controlled Screen definition. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which...

CVE-2026-68524

Apache OFBiz versions prior to 24.09.08 are vulnerable to Pre-Authentication Remote Code Execution (RCE). An unauthenticated attacker can exploit temporary-file handling and access an open file descriptor to inject a "file:" URI , forcing the application to load an attacker-controlled Screen defi...

CVE-2026-122137

Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails. Local attackers can pre-create the predictable gitstatus-install.tmp directory to replace the extracted...

EUVD-2026-117091

Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails. Local attackers can pre-create the predictable gitstatus-install.tmp directory to replace the extracted...

CVE-2026-122137

The Powerlevel10k framework, in versions prior to 1.20.19 , contains an insecure temporary directory vulnerability within the bundled gitstatus/install script. The issue arises because the script reuses attacker-creatable directories when the mktemp command fails. A local attacker can pre-create ...

Exploit for Write-what-where Condition in Linux Linux_Kernel

One-click Jailbreak for iQOO Neo8 V2301A / PD2301 On the...

PT-2026-137159

Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails. Local attackers can pre-create the predictable gitstatus-install.tmp directory to replace the extracted...

CVE-2026-121549: jarun nnn: nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local…

nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and...

Exploit for CVE-2026-98260

CVE-2026-98260 — Analysis of temporary root access and vendor...

dinkleberry

Dinkleberry 🫐 Are you one of the 92,000+ people1 stuck with a D-Link NAS vulnerable to CVE-2024-3272, and no patch in sight? This tool uses the exploit itself to patch a vulnerable device. 1: See original disclosure in refs What it does Dinkleberry will execute a command to swap out the vulnerabl...

iqoo-temp-root

vivo/iQOO Temporary Root Toolkit No bootloader unlocking, no flashing needed, temporary root lost on reboot. Core principle: CVE-2026-43499 futex PI UAF kernel exploit + temporary KernelSU loading. Supported devices App version Device| Codename| Payload ---|---|--- iQOO Z10 Turbo| z10t / iqooz10t...

CVE-2022-30190_Temporary_Fix

🩹CVE-2022-30190 Temporary Fix🩹 These are two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability Follina Both can be programmed better, but this is just to implement it as quickly as possible and I did it without much Python knowledge,...

hazel-cve-2026-43499

Hazel Fire TV temporary root Temporary root exploit for the Amazon hazel Fire TV platform, based on CVE-2026-43499. The exploit is is intended for the ARM32 Linux 4.9 firmware shared by Hazel televisions from several manufacturers. Profiles currently cover firmware from PS7657.3645N through...