CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it di...

EUVD-2026-97566

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

CVE-2024-52317

🚨🚨CVE-2024-52317🚨🚨 CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability Overview CVE-2024-52317 is a vulnerability affecting Apache Tomcat's HTTP/2 implementation. The issue arises due to improper recycling of HTTP/2 request and response resources, potentially leading to data leakage...

NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Metasploit Module InfoBlox Network Automation OS Command Injection Metasploit Module Product: Network Automation NetMRI Switch Port Manager Automation Change Manager Security Device Controller Vendor: InfoBlox Vulnerable Versions: 6.4.X.X-6.8.4.X Tested Version: 6.8.2.11 CV...

CVE-2021-21551

CVE-2021-21551 Dell Driver EoP CVE-2021-21551 Description Dell dbutil23.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. This exploit was tested o...

CVE-2024-53591

CVE-2024-53591 Des: An issue in the login page of Seclore v3.27.5.0 allows attackers to enumerate valid domains internal service via a brute force attack. POC: https://company/policyserver/redirectTprepositoryEntryAction.do?repoCode=10006, brute force repoCode parameter to find all hosted domains...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 🎤 README Translation English فارسی 📸 Screenshot 💎 Introduction This repository contains a Proof of Concept PoC for a critical privilege escalation vulnerability discovered in the LiteSpeed Cache WordPress plugin. The vulnerability,...

CVE-2026-85953

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values. Exploitation could result in unauthorized access to server files or execution...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

CVE-2019-18634

CVE-2019-18634 This is a basic reproduction of CVE-2019-18634, a privilege escalation exploit in sudo with pwfeedback enabled. This was created as part of a project for NTU SC3010 to demonstrate a security vulnerability. To reproduce the exploit, a Docker image of Ubuntu 20.04 was used. A...

EUVD-2026-97669

ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerability in the hosted Login V1 UI, where the change-username handler acts on the account bound to a login flow before any factor is verified. Unauthenticated attackers can submit a victim's login name and then post a new username...

CVE-2023-49978

CVE-2023-49978 Customer Support System 1.0 - Incorrect Access Control Description : Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators. Vulnerable Product Version : Customer Support...

EUVD-2026-97631

Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit crafted assign requests to membersassignment.php with a foreign role UUID to gain privileged...

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

CVE-2021-38699

CVE-2021-38699 TastyIgniter 3.0.7 allows XSS via the name field during user-account creation. A Stored Cross Site Scripting Vulnerability exists in multiple pages of TastyIgniter v3.0.7 that allows for arbitrary execution of JavaScript. https://vulners.com/cve/CVE-2021-38699 Vulnerable Pages:...

cve-2015-1538-1

PLEASE DO NOT SHARE THIS WITH ANYONE. THIS CODE IS BEING PROVIDED TO YOU UNDER FrienNDA. PEOPLE VIOLATING THIS WILL NO LONGER BE CONSIDERED FRIENDS. Included is a python script that generates an MP4 exploiting the ‘stsc’ vulnerability otherwise known as CVE-2015-1538 1. This is one of the most...

CVE-2020-5398

CVE-2020-5398 - RFDReflected File Download Attack for Spring MVC In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header...

CVE-2018-15473

CVE-2018-15473 OpenSSH 7.7 - Username Enumeration Method The attacker can try to authenticate a user with a malformed packet for example, a truncated packet, and: if the user is invalid it does not exist, then userauthpubkey returns immediately, and the server sends an SSH2MSGUSERAUTHFAILURE to t...

EUVD-2026-97506

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote attacker with manage-user-level privileges could exploit this flaw to obtain persistent unauthorized administrative control...

CVE-2026-28672

CVE-2026-28672 — Apache Ranger UnixUserGroupBuilder OS command injection Runnable proof-of-concept reproducer for the OS command injection in Apache Ranger's user-sync unixusersync module. While enumerating the groups of each synced user, UnixUserGroupBuilder runs the id command through a shell,...