firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component...

Driver-RW

Driver-RW Elevate to NT AUTHORITY\SYSTEM with CVE-2018-19321 Tested on WIndows 10 v1511...

CVE-2019-14287-write-up

CVE-2019-14287-write-up 4294967295 Sudo Bug Allows Restricted Users to Run Commands as Root DEMONSTRATION OF VULNERABILITY Add a new user: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // add password to user visudo Add a new entry test ALL=ALL, !root /usr/bin/id // specifying...

CVE-2023-38646

CVE-2023-38646 Metabase Pre-Auth RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1,...

CVE-2020-0796-BOF

This is Raphael's tinkering around with the SMBGhost LPE. I started with the source code from the Metasploit Framework: cve-2020-0796: SMBv3 Compression Buffer Overflow SMBGhost CVE 2020-0796 https://github.com/rapid7/metasploit-framework/tree/master/external/source/exploits/CVE-2020-0796 BSD...

CVE-2023-20198

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description CVE-2023-20198 is characterized by improper path validation to bypass Nginx filtering to reach the webuiwsmahttp web endpoint without requiring authentication. By bypassing authentication to the endpoint, an attacker can execute arbitrary...

MGASA-2026-0484 Updated libextractor package fixes security vulnerabilities

GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...

MGASA-2026-0491 Updated nss & firefox packages fix security vulnerabilities

Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the Storage: Quota Manager component. CVE-2026-100759 Sandbox esca...

MGASA-2026-0492 Updated thunderbird packages fix security vulnerabilities

Heap buffer overflow opening large email. CVE-2026-103500 Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the...

MGASA-2026-0487 Updated rsync package fixes security vulnerabilities

Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, which could result in local privilege escalation, bypass of intended access restrictions, information disclosure, denial of service or the execution of arbitrary code...

Updated thunderbird packages fix security vulnerabilities

Heap buffer overflow opening large email. CVE-2026-103500 Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the...

Updated libextractor package fixes security vulnerabilities

GNU libextractor before 1.15 Stack Overflow via OLE2. CVE-2026-91752 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTORPREFIX. CVE-2026-100310...

Updated rsync package fixes security vulnerabilities

Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, which could result in local privilege escalation, bypass of intended access restrictions, information disclosure, denial of service or the execution of arbitrary code...

Updated nss & firefox packages fix security vulnerabilities

Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the Storage: Quota Manager component. CVE-2026-100759 Sandbox esca...

EUVD-2026-97771

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-105464 IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-105464

IBM Db2 (Server) versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 for Linux, UNIX, and Windows (including DB2 Connect Server) are vulnerable to improper privilege management (CWE-269). A local attacker with DBADM authorization can exploit this flaw to gain elevated privileges , potentiall...

CVE-2022-21392

CVE-2022-21392: Local Privilege Escalation via NMR SUID in Oracle Enterprise Manager In Oracle installations, where the “nmr” binary is present and SUID-ed as “root”, due to insecure directory permissions, the “oracle” user can elevate his/her privileges to that of the “root” user by replacing th...

CVE-2014-4322

poc code works on Nexus 5 Android4.4.4 Gain privileges：system-root，as part of https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege author：andy website：https://blog.csdn.net/koozxcv The exploit must be excuted as system privilege and serveral specific SELinux context.If exploit...

CVE-2026-104355 Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces

A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote...