CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 ローカル権限昇格の脆弱性研究およびPoc/Exploit開発 影響を受けるシステムとアプリケーションのバージョン Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64‑based Systems Windows 10 Version 20H2 for 32‑bit Systems Windows 10 Version 20H2 for x64‑based Systems...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits ペネトレーションテスターやレッドチーム向けのエクスプロイトとドキュメントのコレクションで、Linux Dirty Pipe脆弱性の悪用を支援するために使用できます。 脆弱性について Dirty Pipe CVE-2022-0847 はLinuxカーネルのローカル権限昇格脆弱性であり、権限のないユーザーが以下のことを行える可能性があります： /etc/passwd などの任意の読み取り専用ファイルの変更/上書き。 昇格したシェルの取得。 影響を受けるバージョン Linuxカーネルバージョン5.8以降が影響を受けます。...

CVE-2021-31956-EXP

在 WIN10 1903 上运行，体验并非完美 https://bbs.pediy.com/thread-271140.htm...

CentOS Linux 7 [TuxCare] Security Update: aide (CENTOS7:CLSA-2026:1784559120)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1784559120 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

KDE_Vuln

KDE vFAT 脆弱性についての考察。 1: 影響範囲は当初考えていたほど大きくはない。 ほとんどのシステムはおそらく、新しいバージョンのKDEに更新されているか、別のGUIを実行しているだろう。 ただし、正確な数値を得るには実際の統計データを確認する必要があるだろう。 マシンへの物理的アクセスを得ること自体がすでに大変な作業なのに、ターゲットマシンが想定していたものとは異なるGUIを実行しているというだけでエクスプロイトが機能しないのは、厄介に思える。 2: vFATラベルの11文字制限はもどかしい。...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits 针对渗透测试人员和红队成员的一系列漏洞利用工具及文档，用于辅助利用 Linux Dirty Pipe 漏洞。 关于漏洞 Dirty Pipe（CVE-2022-0847）是 Linux 内核中的一个本地权限提升漏洞，可能允许非特权用户执行以下操作： 修改/覆盖任意只读文件（如 /etc/passwd）。 获取高权限 shell。 受影响版本 受影响的是 Linux 内核版本 5.8 及更高版本。 目前以下 Linux 内核版本已修复该漏洞： 5.16.11 5.15.25 5.10.102...

CVE-2026-83293

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: FNDN. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligen...

Astra Linux – Vulnerability in Linux 5.10

A vulnerability was discovered in the kvms390guestsidaop function within the arch/s390/kvm/kvm-s390.c file in KVM for s390 in the Linux kernel. This flaw allows a local attacker with normal user privileges to gain unauthorized memory write access. This vulnerability affects Linux kernel versions...

kernel-devel-7.2.3-1.1 on GA media (moderate)

kernel-devel-7.2.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11703-1 Rating: moderate Cross-References: CVE-2026-80724 CVSS scores: CVE-2026-80724 SUSE : 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVE-2026-80724 SUSE : 4.8...

Oracle Linux 8 : ELSA-2026-62420-0: / gegl04 (ELSA-2026-624200)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-624200 advisory. 0.4.4-7.1 - Fix CVE-2026-18300 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

EUVD-2024-55738

A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation...

CVE-2026-40684 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-71131

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

kubeshark-cli-53.4.0-1.1 on GA media (moderate)

kubeshark-cli-53.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11519-1 Rating: moderate Cross-References: CVE-2026-49445 CVSS scores: CVE-2026-49445 SUSE : 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

PT-2026-76572

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.1.0 Description Files src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts generate temporary filenames using Math.random, which is not cryptographically secure and predictable across calls withi...

EUVD-2026-57623

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-72898

creationtimestamp| type| source ---|---|--- 2026-08-10 18:04:27+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117072531713464991 2026-08-10 18:04:38+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22 2026-08-10 18:56:56+00:00| seen|...

EUVD-2026-55626

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...

CVE-2026-21067

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

EUVD-2026-54977

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...