-Linux-PrivEsc-CVE-2024-48990

Privesc-need-restart-2024-48990 Описание эксплойта CVE-2024-48990 - Pure Python Этот скрипт эксплуатирует уязвимость CVE-2024-48990 в утилите needrestart Linux путем перехвата пути библиотек PYTHONPATH hijacking. В отличие от исходного вектора, этот метод использует исключительно Python, что...

CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo локальная эскалация привилегий: описание и POC CVE-2024-32019 Описание Автоматический эксплойт Ресурсы Описание !TIP Пожалуйста, прочитайте Netdata — это инструмент для мониторинга приложений и систем. Он работает на порту 19999, что легко обнаружить: test@test:$...

CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC

CVE-2024-32019 Netdata ndsudo Escalade de Privilèges PoC Résumé CVE-2024-32019 est une faille locale d'escalade de privilèges dans l'assistant SUID ndsudo de Netdata qui permet à un utilisateur local d'exécuter des programmes arbitraires en tant que root via un chemin de recherche non fiable...

CVE-2024-32019-POC

Élévation de privilèges via ndsudo Exploit local Netdata Ce POC est utilisé pour exploiter un utilitaire ndsudo vulnérable fourni avec Netdata afin d'élever les privilèges locaux à root. L'exploit fonctionne en injectant un binaire malveillant dans le PATH de l'utilisateur qui usurpe une commande...

CVE-2024-32019-ndsudo-local-privilege-escalation-NetData

CVE-2024-32019 Proof of Concept Python Реализация эксплуатации локального повышения привилегий LPE для Netdata CVE-2024-32019 на Python. Этот скрипт эксплуатирует уязвимость в компоненте ndsudo, в которой переменная окружения PATH должным образом не очищается. Это позволяет локальному...

-Netdata-PrivEsc-CVE-2024-32019

CVE-2024-32019-Netdata-ndsudo-PrivEsc CVE-2024-32019: Netdata ndsudo PrivEsc HTB Editor Автоматизированный скрипт на Bash для эксплуатации уязвимости PATH Hijacking в SUID-бинарном файле ndsudo Netdata CVE-2024-32019. Данный эксплойт был специально адаптирован для обхода распространенных...

CVE-2026-87723

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

EUVD-2026-88074

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723

Google fuse-archive versions prior to 1.24 are vulnerable to an Untrusted Search Path (PATH Hijacking) . An attacker capable of prepending a directory to the PATH or writing a malicious binary to a writable directory within the PATH can hijack the execution pathway. This vulnerability allows for ...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-89325

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

CVE-2026-91803 Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

CVE-2026-91803 Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

Security Bulletin: Impacted IBM Optim 1.0.0 and 1.2.0  by vulnerability in go.opentelemetry.io/otel/sdk

Summary IBM Optim versions 1.0.0 and 1.1.0 include open-source package go.opentelemetry.io/otel/sdk which is affected by a high-severity vulnerability. IBM Optim 1.2.0 resolves this vulnerability by upgrading the affected open-source package to a fixed version. Vulnerability Details...

GHSA-V8PV-4842-X354 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

Summary The OpenTelemetry.Resources.Host NuGet package is affected by an untrusted search path vulnerability on macOS. The host.id resource attribute detector launches the sh and ioreg executables by bare name rather than by absolute path, so both are resolved through the PATH environment variabl...

OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

Summary The OpenTelemetry.Resources.Host NuGet package is affected by an untrusted search path vulnerability on macOS. The host.id resource attribute detector launches the sh and ioreg executables by bare name rather than by absolute path, so both are resolved through the PATH environment variabl...

CVE-2026-81192

CVE-2026-81192 is an untrusted search path vulnerability in the OpenTelemetry.Resources.Host NuGet package, affecting macOS only. The host.id resource attribute detector invokes sh and ioreg by bare name, resolving them through the PATH environment variable rather than by absolute path. A less-pr...

CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...