grafana: Grafana: Privilege escalation via dashboard overwrite

A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.33 packages and security update

Red Hat OpenShift Container Platform release 4.21.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

grafana: Grafana: Privilege escalation via dashboard overwrite

A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard...

CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit 부분 COW 페이지 캐시 손상 범인 커밋 899ee91156e5, v5.18부터 v7.1-rc7에서 수정됨. packeteditmeme.c는 이를 권한 없는 로컬 루트로 변환합니다: userns CAPNETADMIN 자식 프로세스가 setuid-root 바이너리의 캐시된 ELF 메타데이터를 setgid0+setuid0+execve"/bin/sh" 셸코드로 덮어씁니다. root@kitploit: make ./packeteditmeme...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 Неаутентифицированное повышение привилегий через внедрение роли === Beelze zeroday 1diot9 === 📋 Информация об уязвимости Поле| Детали ---|--- CVE ID| CVE-2026-5118 CVSS Score| 9.8 Критический CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE|...

2026-11551

2026-11551 CVE-2026-11551: Branda Plugin - 인증되지 않은 계정 탈취를 통한 권한 상승...

CVE-2026-45048 OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps CVE-2025-54918（Windows NTLM の欠陥）のシミュレーションされた悪用と緩和策。検出スクリプト、Ansible パッチ適用、CI/CD 強化が含まれます。ハイブリッドクラウド環境における低レベルアクセスから SYSTEM への権限昇格を示します。 Mark Mallia 著 はじめに: クリックから制御へ – CVE-2025-55226 と CVE-2025-54918 の連鎖...

CVE-2025-27591-PoC

CVE-2025-27591-PoC CVE-2025-27591 PoC — Below ローカル権限昇格 このリポジトリには、Linux システム可観測性ツール Below で CVE-2025-27591 として識別されるローカル権限昇格の脆弱性を実証する Proof of Concept PoC が含まれています。 Hack The Box HTB の https://app.hackthebox.com/machines/Outbound?sortby=createdat&sorttype=desc のために作成されました。 Usage chmod +x exp.sh /.ex...

postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse

A SQL injection flaw in PostgreSQL's EXTRACT expression deparser allows an authenticated object owner to execute arbitrary SQL commands with superuser privileges. By defining a hostile database object, an attacker can achieve privilege escalation when deparsing tools like pgdump or psql inspect o...

thm-cybersec-portfolio

TryHackMe 노트 — 사이버 보안 포트폴리오 완료한 TryHackMe 룸에 대한 개인 노트 및 요약. IT 보안 역할을 위한 학습 참고 자료 및 포트폴리오로 작성되었습니다. 완료된 룸 | 룸| 주제 ---|---|--- 01| Linux Privilege Escalation| Linux 권한 상승 기술 02| Sudo Buffer Overflow| CVE-2019-18634 03| OWASP Top 10 2025: IAAA Failures| 손상된 접근 제어, 인증 실패, 로깅 04| OWASP Top 10 2025:...

CVE-2026-8181

Эксплойт CVE-2026-8181 Плагин Burst Statistics для WordPress — Обход аутентификации с повышением привилегий до администратора Эксплойт для CVE-2026-8181, обнаруженный Chloe Chamberland и PRISM. ⚠️ Отказ от ответственности Этот репозиторий предоставлен только для исследований и целей защиты. Автор...

CVE-2026-31431-EXPLOIT

CVE-2026-31431 - 복사 실패 이 취약점은 권한 없는 로컬 공격자 가 취약한 Linux 시스템에서 루트 권한 을 획득할 수 있게 합니다. ⚠️ 면책 조항 이 코드는 교육 및 보안 연구 목적으로만 제공됩니다. 이 코드는 Linux 커널의 AFALG 소켓 인터페이스에서 가상의 취약점CVE-2026-31431을 시연합니다. 소유하지 않았거나 명시적인 서면 허가를 받지 않은 시스템에서는 이 코드를 실행하지 마십시오. 이 코드의 오용은 법률과 규정을 위반할 수 있습니다. 📜 설명 CVE-2026-314312026년 공개은...

CVE-2026-76159

Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to escalate privileges to NT AUTHORITY\SYSTEM via an attacker-controlled preload.json file...

CVE-2026-75092

A privilege escalation flaw was found in the scanmysql actor of leapp-upgrade-el9toel10 provided by leapp-repository. During RHEL 9 to RHEL 10 upgrades, the actor runs: mysqld --validate-config --log-error-verbosity=2 directly as root in the Leapp actor context, bypassing the packaged MySQL syste...

Active-Directory-BadSuccessor

Active-Directory-BadSuccessor Обзор В этой комнате мы исследуем технику повышения привилегий BadSuccessor — уязвимость, связанную со злоупотреблением делегированными управляемыми учётными записями служб dMSA в Active Directory. Атака позволяет пользователю с достаточным контролем над объектом dMS...

glass-cage-i18-2025-24085-and-cve-2025-24201

Оригинальная сеть форка осталась Glass Cage: Эксплойтная цепочка PNG с нулевым кликом для iOS 18.2.1 CVE-2025-24201 – Удаленное выполнение кода WebKit CVE-2025-24085 – Повышение привилегий Core Media Сообщено Apple: 9 января 2025 г. Исправлено: февраль–март 2025 г. Протестировано на: iPhone 14 Pr...