Moderate: Red Hat Security Advisory: firewalld security update

An update for firewalld is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2023-1326

CVE-2023-1326 CVE-2023–1326 在 apport-cli 2.26.0 中的概念验证 此漏洞是 apport-cli 2.26.0 中的权限提升漏洞，类似于 CVE-2023–26604，该漏洞仅在 sudoers 中分配时才有效： 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击，类似于 CVE-2023-26604。如果系统被特殊配置允许非特权用户运行 sudo apport-cli，且 less 被配置为分页器，并且可以设置终端大小，则本地攻击者可以提升权限。 sudo /usr/bin/apport-cli -f !id...

CVE-2026-106105

The Quasar Framework contains a vulnerability where the @quasar/ssl-certificate utility caches combined private keys and certificates without applying owner-only filesystem permissions . This occurs in versions prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0....

printix-CVE-2022-29554

CVE-2022-29554 Publicación simple | Versión para imprimir Una vulnerabilidad de "Manejo incorrecto de entrada a la API" o "Método o función peligrosos expuestos" en PrintixService.exe, en la "Gestión de impresión segura en la nube de Printix" de Kofax Printix, versión 1.3.1156.0 e inferiores,...

CVE-2020-13885

Título del Exploit: Citrix Workspace app anterior a 1912 para Windows - Escalada de Privilegios 1 Fecha: 2020-06-07 Autor: Andrew Hess Enlace del software: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Boletín:...

CVE-2026-76105

Dell Container Storage Modules, versions prior to 1.18.0 contains an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack ca...

EUVD-2026-93459

Dell Container Storage Modules, versions prior to 1.18.0 contains an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identificada en la función createSessionInternal del archivo PackageInstallerService.java, es una vulnerabilidad de alta gravedad que afecta a Android versiones 12 y 13. Esta vulnerabilidad permite a un atacante realizar un ataque "run-as any app", lo que conduce a un...

samsung-bixby-command-execution-cve-2026-21055-improper-component-export

CVE-2026-21055 PoC — Exportación Incorrecta de Componentes de Samsung Bixby Prueba de concepto para CVE-2026-21055 : La exportación incorrecta de componentes de aplicaciones Android en Samsung Bixby anterior a la versión 4.0.70.8 permite a atacantes locales ejecutar comandos arbitrarios con...

CVE-2021-3493-Exploit

CVE-2021-3493-Exploit Una prueba de concepto de escalada de privilegios local para CVE-2021-3493, escrita en C. 📌 Descripción Este repositorio contiene una implementación en C del exploit para CVE-2021-3493. Esta es una vulnerabilidad de Escalada de Privilegios Local LPE en la implementación de...

dirtypipez-exploit

Exploit DirtyPipe CVE-2022-0847. Crédito: Max Kellermann [email protected] Una nueva vulnerabilidad de Linux conocida como 'Dirty Pipe' permite a usuarios locales obtener privilegios de root a través de exploits disponibles públicamente. Hoy, el investigador de seguridad Max Kellermann divul...

CVE-2026-7574

🚨 CVE-2026-7574 — Claude Desktop Cowork VM Integrity Bypass Anthropic Claude Desktop Cowork VM Image Integrity Bypass 🔥 Local Persistence Through VM Image Tampering An integrity validation weakness allowing modification of the Claude Desktop Cowork VM filesystem image rootfs.img, enabling...

CVE-2021-4034

CVE-2021- A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling...

USN-8875-1 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...

USN-8875-1: Linux kernel vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...

USN-8877-1: Linux kernel (GCP) vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...

USN-8877-1 linux-gcp, linux-gcp-fips vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...

USN-8876-1: Linux kernel (Azure CVM) vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...

CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 Una vulnerabilidad de fuga de interfaz de depuración de elementos en la versión para Android de pikpak versión V1.29.2 corregido en pikpak 1.30.1 Descripción sugerida Se descubrió que la versión para Android de pikpak v1.29.2 contiene una fuga de información a través...