CVE-2025-4334.zip
1.8 KB
CVE-2025-4334
Author: vinodwick
The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to register as an administrator.
GitHub Link:
https://github.com/vinodwick/CVE-2025-4334
Author: vinodwick
The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to register as an administrator.
GitHub Link:
https://github.com/vinodwick/CVE-2025-4334
CVE-2025-32463.zip
429 B
CVE-2025-32463
Author: DensuLabs
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
GitHub Link:
https://github.com/DensuLabs/CVE-2025-32463
Author: DensuLabs
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
GitHub Link:
https://github.com/DensuLabs/CVE-2025-32463
CVE-2025-56521
Author: Dong-hui-li
None
GitHub Link:
https://github.com/Dong-hui-li/CVE-2025-56521andCVE-2025-56522
Author: Dong-hui-li
None
GitHub Link:
https://github.com/Dong-hui-li/CVE-2025-56521andCVE-2025-56522
CVE-2018-15473.zip
8.3 KB
CVE-2018-15473
Author: jubeenshah
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
GitHub Link:
https://github.com/jubeenshah/CVE-2018-15473-Exploit
Author: jubeenshah
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
GitHub Link:
https://github.com/jubeenshah/CVE-2018-15473-Exploit
CVE-2025-29824.zip
2.1 MB
CVE-2025-29824
Author: zmkeh
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
GitHub Link:
https://github.com/zmkeh/CVE-2025-29824-CLFS-Local-privilege-escalation
Author: zmkeh
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
GitHub Link:
https://github.com/zmkeh/CVE-2025-29824-CLFS-Local-privilege-escalation