2721 matches found
CVE-2015-1328
CVE-2015-1328 Prueba de Concepto Un exploit de Prueba de Concepto PoC para CVE-2015-1328, una vulnerabilidad de escalada de privilegios que afecta la implementación de overlayfs del kernel de Linux. Esta vulnerabilidad permite a usuarios locales sin privilegios obtener acceso root explotando...
velociraptor_CVE-2025-6264_PoC
CVE-2025-6264 DISCLAIMER: This is an educational research project. I did not discover this vulnerability. This repository demonstrates CVE-2025-6264 for learning purposes Affected versions before 0.74.3 Affects Windows, MacOS and Linux The Admin.Client.UpdateClientConfig artifact is missing...
CVE-2026-88619
1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in its scheduled-job management module. The AdminSmartJobController exposes endpoints without method-level permission checks, allowing a low-privileged authenticated user to perform actions intended only for authorized adm...
Astra Linux – Vulnerability in Linux
In the rbd block device driver located in drivers/block/rbd.c within the Linux kernel, up to version 5.8.9, incomplete permission checks were used for accessing rbd devices. This could have been exploited by local attackers to map or unmap rbd block devices, specifically the CID-f44d04e696fe devi...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: dochangetype: refusal to operate on unmounted/not-of-our-mounts mounts. It is ensured that propagation settings can only be changed for mounts located within the caller’s mount namespace. This change aligns permission checks with...
Astra Linux – Vulnerability in Linux, Linux-6.1
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs: Ovlcopyupmeta inodedata function skips permission checks when calling ohldosetxattr on Ubuntu kernels...
Astra Linux – Vulnerability in Zabbix
The request to LDAP is sent before checking the user permissions...
CVE-2026-87987
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks by placing environment variable assignments before allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to trigger c...
SUSE CVE-2026-20909
Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries...
CVE-2026-86490
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint...
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...
CVE-2026-86495
JetBrains YouTrack versions before 2026.2.18687 are affected by missing permission checks that allow a low-privileged user to create knowledge base articles in projects they cannot otherwise access. This results in a HIGH integrity impact (CVSS 3.1 score 6.5 MEDIUM , vector AV:N/AC:L/PR:L/UI:N/S:...
EUVD-2026-72511
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...
CVE-2026-86493
JetBrains YouTrack versions before 2026.2.18634 contained improper permission checks that allowed read-only users to create and modify whiteboard cards . This represents an authorization bypass with an integrity impact — a user granted only read access could alter content without being permitted ...
CVE-2026-86493
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards...
CVE-2026-86490
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint...