CVE-2026-100820

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

DEBIAN-CVE-2026-100824

Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-100824

Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

DEBIAN-CVE-2026-100807

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100807

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100801

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

DEBIAN-CVE-2026-100801

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

DEBIAN-CVE-2026-100797

Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100797

Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100782

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

DEBIAN-CVE-2026-100782

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100761

Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100764

Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2020-25270

CVE-2020-25270 PHPGurukul hostel-management-system 2.1은 Guardian Name, Guardian Relation, Guardian Contact no, Address, City를 통해 XSS를 허용합니다. 공급업체 - PHPGurukul 제품 -https://phpgurukul.com/hostel-management-system V2.1 취약점 유형 - 크로스 사이트 스크립팅 XSS 추가 정보 - XSS는 양쪽에서 트리거되며, 사용자는 관리자 쿠키를 탈취하여 관리자 권한을 상승시킬...

CVE-2025-32463

CVE-2025-32463 Linux에서 Sudo chroot를 통한 루트 권한 상승. 이게 뭐야? 자세한 소식은 여기서 읽을 수 있어요 : https://www.helpnetsecurity.com/2025/07/01/sudo-local-privilege-escalation-vulnerabilities-fixed-cve-2025-32462-cve-2025-32463/ TL;DR 및 CMIIW 자, sudo는 명령을 admin/root로 실행하기 위한 명령어잖아요. 사용자는 sudoers 그룹에 속해 있어야 sudo를 실행할 수...

CVE-2025-32462-Exploit

CVE-2025-32462-Exploit: Matrix-Sudo Escape 호스트명 스푸핑 권한 상승 CVE-2025-32462 "너는 파란 약을 먹으면... 이야기가 끝난다. 너는 빨간 약을 먹으면... 루트를 얻는다." 설명 이 익스플로잇은 sudoCVE-2025-32462에서 호스트명 기반 제한을 -h 플래그를 사용하여 우회할 수 있는 권한 상승 취약점을 시연합니다. PoC는 제한된 사용자 환경을 만든 후, 허용된 호스트명을 스푸핑하여 루트 접근을 획득하는 방식으로 이를 탈출합니다. user@matrix-node$ su...

cisco-CVE-2023-20075

소개 보안 연구원: ly1g3, ly1g3attuta.io GPG 지문: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 개요: 로컬 권한 상승 및 셸 탈출 CVE: CVE-2023-20075 타임라인: 발견 - ly1g3 보고 - ly1g3 수정 - Cisco Cisco AsyncOS 14.2.0 ESA Cisco Secure Email 권한 상승 - cli에서 root 셸로 cli에 접근 권한이 있는 인증된 사용자는...

cisco-CVE-2023-20009

소개 보안 연구원: ly1g3, ly1g3attuta.io GPG 지문: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 개요: 원격 코드 실행 - 설정 파일로부터의 RCE CVE: CVE-2023-20009 타임라인: 발견 - ly1g3 보고 - ly1g3 수정 - Cisco Cisco AsyncOS 14.2.0 ESA Cisco Secure Email 및 Cisco Secure Email and Web Manager...

CVE-2026-46242

CVE-2026-46242 полный poc и lpe Kernel Range Status Notes 5.15.209 - 5.16 Подвержена Бэкпортирован с внедряющим коммитом 6.1.175 - 6.2 Подвержена Бэкпортирован с внедряющим коммитом 6.4 - 6.18.32 Подвержена Ошибка внедрена в основной линии 6.4 6.19 - 7.0.9 Подвержена Включает последний стабильный...

firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component...