CVE-2025-27591

استغلال لـ CVE-2025-27591 لأغراض تعليمية فقط أُعدّ لجهاز HTB "Outbound" كيف يعمل CVE-2025-27591؟ CVE-2025-27591 هو ثغرة تصعيد صلاحيات محلية في خدمة Below في الإصدارات الأقدم من 0.9.0. تقوم الخدمة بإنشاء مجلد قابل للكتابة من قبل جميع المستخدمين world-writable في المسار /var/log/below أثناء عملها...

CVE-2025-27591-PoC

CVE-2025-27591 إثبات المفهوم CVE-2025-27591 هي ثغرة تصعيد صلاحيات أثرت على خدمة Below قبل الإصدار 0.9.0. نشأت المشكلة بسبب إنشاء مجلد قابل للكتابة عالميًا في /var/log/below. يمكن للمهاجم استغلال هذه الثغرة من خلال التلاعب بالروابط الرمزية داخل هذا المجلد وربما الحصول على صلاحيات الجذر، مما يجعلها...

CVE-2025-27591

CVE-2025-27591 Below v0.9.0 PoC-Exploit zur Privilegienerweiterung Haftungsausschluss Dieser Exploit ist ausschließlich für Bildungszwecke gedacht. Er wurde entwickelt, um Benutzern zu helfen, Sicherheitsschwachstellen zu verstehen und ihr Wissen über Cybersicherheit zu verbessern. Der Autor...

EUVD-2025-7209

Malicious code in bioql PyPI...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 PoC: Local Privilege Escalation in Below v0.9...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591-Proof-Of-Concept Existía una vulnerabilidad de...

SUSE CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...

GHSA-9MC5-7QHG-FP3W Below has Incorrect Permission Assignment for Critical Resource

Impact A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as...

CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...

CVE-2025-27591

CVE-2025-27591 – Below privilege escalation : Prior to v0.9.0, the Below service creates a world-writable directory at /var/log/below and writes a world-writable log file, enabling local unprivileged users to perform a symlink attack (e.g., replacing error_root.log with a link to /etc/passwd). Th...

CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...

CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...

PT-2025-10891

Name of the Vulnerable Software and Affected Versions Below versions prior to 0.9.0 Description A flaw exists in the Below service that allows for privilege escalation. This is due to the creation of a world-writable directory located at /var/log/below. Local, unprivileged users could exploit thi...