wordpress-skelersecurity-core-security-CVE-2026-63030

SkelerSecurity Core Security Plugin A focused, temporary mitigation for unauthenticated access to WordPress Core’s REST Batch API endpoint. Overview SkelerSecurity Core Security Plugin requires authentication before WordPress processes requests to the Core REST Batch API route: /wp-json/batch/v1...

CVE-2019-2215

CVE-2019-2215 Android Kernel Vulnerability CVE-2019-2215 temporary root PoC. It works on Google Pixel 2/Pixel 2 XL walleye/taimen devices running the September 2019 QP1A.190711.020 image with kernel version-BuildID 4.4.177-g83bee1dc48e8. Usage Now, Binary support arm64 only. $ git clone...

CVE-2026-43499-aristotle-apk

Aristotle ADB Enable A minimal Android app that turns on ADB on an au/KDDI Xiaomi "aristotle" XIG04, Android 12 whose developer options can't be reached, using a temporary root obtained from CVE-2026-43499. It is a device-owner tool in the same category as KingRoot: it roots your own phone to fli...

PoC_CVE-2023-24055

PoCCVE-2023-24055 How to run ? Edit the $User var in the script and replace value with your Username. Open a PowerShell as administrator and run the script : ./PoCCVE-2023-24055.ps1 After the script execution open KeePass. Result is stored under "C:\Users\yourusername\AppData\Local\Temp\output.xm...

CVE-2026-17525 My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion

Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5...

CVE-2026-17525

The ABB My Control System versions 26.4 and 26.5 are susceptible to an incomplete cleanup vulnerability (CWE-459). The root cause is an incorrect cleanup of temporary files following an XML conversion , which can lead to disk space exhaustion . This issue impacts the availability of the system. R...

CVE-2025-66478-kinda-waf

kinda-waf Simple, temporary WAF protection tester targeting a specific payload sequence. Let's help websites stay safe until they are properly patched! Purpose Protect from CVE-2025-66478 by detecting and blocking requests containing specific payload signatures. This shouldn't break legitimate...

ghostlock-s26

GhostLock - Android wrapper indev.ghostlock.s26 One-click Android wrapper for polygraphene/ghostlock-s26: GhostLock CVE-2026-43499 ported to the whole Samsung Galaxy S26 series Android 16 / GKI 6.12. One APK, three kernel lines, runtime parameter matching - no per-build app variants. Use only on...

CLEANSTART-2026-CK79983 Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1

Security vulnerability affects the strimzi-kafka-operator package. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1...

Metalama allows local code execution through DLL planting in shared temporary directories

Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...

GHSA-M6WQ-39M7-9XPP Metalama allows local code execution through DLL planting in shared temporary directories

Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...

Exploit for Write-what-where Condition in Linux Linux_Kernel

DirtyFrag Galaxy A57 5G Root temporário para o Samsung Galaxy...

CVE-2026-82715

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A...

EUVD-2026-100774

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A...

CVE-2026-82715

An Insecure Temporary File vulnerability (CWE-377) exists in the Hitachi Disk Array Driver for AIX (versions 01-00 before 01-23-/A) and the Hitachi Disk Array Driver for Virtual I/O Server (versions 01-04 before 01-23-/A). This flaw could lead to High impacts on integrity and availability accordi...

cve-2026-43499-aak-an00

CVE-2026-43499 · 荣耀 WIN RT AAK-AN00 临时 Root 研究笔记 （全是deepseek写的，我啥也不懂） （又折腾了几天，进展为零，放弃了） （目前可以获取root，但非常不稳定，root后会断网，拔线会重启） （此仓库所有结论都只适用于荣耀 WIN RT，CVE-2026-43499漏洞，6.6.118-android15-8-gf17133276a57-abogki518694926-4k内核，不要扩散结论到临时root上，临时root可以持续并相对稳定运行） 设备 Bootloader 永久锁死 （ro.oemunlock.supported...

PT-2026-113597

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A...

CVE-2026-110234

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

CVE-2026-110237

Versions 0.8.1-beta through 0.14.4 of Vifm are vulnerable to a local privilege escalation flaw. The software reuses a pre-existing IPC FIFO in the shared temporary directory without verifying its ownership. A local attacker can pre-create a world-writable vifm-ipc-vifm FIFO and inject IPC packets...

CVE-2026-110234 Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...