Updated libextractor package fixes security vulnerabilities

GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...

Updated nss & firefox packages fix security vulnerabilities

Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the Storage: Quota Manager component. CVE-2026-100759 Sandbox esca...

Updated thunderbird packages fix security vulnerabilities

Heap buffer overflow opening large email. CVE-2026-103500 Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the...

Updated rsync package fixes security vulnerabilities

Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, which could result in local privilege escalation, bypass of intended access restrictions, information disclosure, denial of service or the execution of arbitrary code...

MGASA-2026-0484 Updated libextractor package fixes security vulnerabilities

GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...

CVE-2026-105464 IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain elevated privileges due to improper privilege management...

EUVD-2026-97771

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-105464

IBM Db2 (Server) versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 for Linux, UNIX, and Windows (including DB2 Connect Server) are vulnerable to improper privilege management (CWE-269). A local attacker with DBADM authorization can exploit this flaw to gain elevated privileges , potentiall...

CVE-2022-21392

CVE-2022-21392: Local Privilege Escalation via NMR SUID in Oracle Enterprise Manager In Oracle installations, where the “nmr” binary is present and SUID-ed as “root”, due to insecure directory permissions, the “oracle” user can elevate his/her privileges to that of the “root” user by replacing th...

CVE-2014-4322

poc code works on Nexus 5 Android4.4.4 Gain privileges：system-root，as part of https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege author：andy website：https://blog.csdn.net/koozxcv The exploit must be excuted as system privilege and serveral specific SELinux context.If exploit...

CVE-2026-104355 Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces

A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote...

winmagic_sd

Technical Write-up on CVE-2020-11519 and CVE-2020-11520 Date: June 2020 Author: Dennis Elser code: github Table of Contents Introduction Approach and Technical Description CVE-2020-11519 CVE-2020-11520 Proof-of-Concept Exploit Disclosure Timeline Solution Checksums References Introduction In...

CVE-2026-105465

IBM Db2 (Server edition) versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on Linux and Unix platforms are vulnerable to privilege escalation (CWE-269) when db2locssh is enabled with the db2 instance. This vulnerability allows a low-privileged user to escalate privileges. Remediation is av...

EUVD-2026-97765

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance...

CVE-2026-105465 IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance...

CVE-2026-78404 IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility...

CVE-2026-78404

IBM Db2 is vulnerable to local privilege escalation via the db2pd utility due to Improper Privilege Management (CWE-269). This issue affects the Server edition on Linux and Unix platforms for versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 . Windows platforms are not affected. Impact inc...

EUVD-2026-97764

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility...

evil-rmi-server

evil-rmi-server An evil RMI server that can launch an arbitrary command. May be useful for CVE-2021-44228 in a local privesc scenario Build ./gradlew bootJar Run Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar -hV -p= An evil RMI Server to help construct and run an arbitrary command. T...

CVE-2026-57239

Foxit PDF Reader LPE Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. Build Just build the binary, drop it on your target and run it. cargo build --release Usage The program has...