3024 matches found
ASB-A-435188844
In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2015-1328
CVE-2015-1328 Proof of Concept A Proof of Concept PoC exploit for CVE-2015-1328, a privilege escalation vulnerability affecting the Linux kernel's overlayfs implementation. This vulnerability allows local unprivileged users to gain root access by exploiting improper permission checks in overlayfs...
velociraptor_CVE-2025-6264_PoC
CVE-2025-6264 DISCLAIMER: This is an educational research project. I did not discover this vulnerability. This repository demonstrates CVE-2025-6264 for learning purposes Affected versions before 0.74.3 Affects Windows, MacOS and Linux The Admin.Client.UpdateClientConfig artifact is missing...
SUSE CVE-2026-99129
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
CVE-2026-59979
YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. authorizeCognito in apps/backend/src/middlewares/auth.ts sets the...
EUVD-2026-112145
YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. authorizeCognito in apps/backend/src/middlewares/auth.ts sets the...
CVE-2026-59979
YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. "authorizeCognito" in "apps/backend/src/middlewares/auth.ts" sets the...
CVE-2026-99129
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
CVE-2026-99129 selinux: fix BPF token permission checks
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
CVE-2026-99129
The Linux kernel contains a vulnerability in selinux related to BPF token permission checks. The issue stems from multiple lookups of the bpffs creator SID using the token's file descriptor, rather than using the resolved path/dentry (in selinux_bpf_token_create()) or the token itself (in selinux...
CVE-2026-99129 selinux: fix BPF token permission checks
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
CVE-2026-99129
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.0. It stems from repeated lookups of the bpffs creator SID within SELinux’s BPF token permission checks; this may lead to a TOCTOU issue when users modify the token file descriptor passed to the kernel...
CVE-2026-59979: Authorization Bypass Through User-Controlled Key
YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. authorizeCognito in apps/backend/src/middlewares/auth.ts sets the...
CVE-2026-99129: Linux: In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid…
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
Jenkins security vulnerabilities
Security vulnerabilities exist in Jenkins versions 2.587 and earlier, as well as LTS 2.580.1 and earlier. These vulnerabilities stem from a lack of permission checks and may allow attackers with Overall/Read privileges to obtain configuration details such as the server, port, username, and list o...
PT-2026-128122
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinux bpf token create or the tok...
CVE-2026-3322
Due to improper permission checks in Lobsterpro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobsterpro version 4.12.12-LTS and potentially other versions prior to 25.1.3...
EUVD-2026-109944
Due to improper permission checks in Lobsterpro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobsterpro version 4.12.12-LTS and potentially other versions prior to 25.1.3...
Apple iOS security vulnerabilities
A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8, Apple macOS Tahoe versions prior to 26.7, Apple tvOS...