WordPress Redux Framework plugin <= 4.5.11 - Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation vulnerability

Redux Framework = 4.5.11 – Authenticated Subscriber+ Privilege Escalation vulnerability discovered by shark3y in WordPress Plugin Redux Framework versions = 4.5.11...

CVE-2026-98219

A flaw was found in the Linux kernel's schedext subsystem. A local attacker could exploit a race condition during scheduler initialization to cause a denial of service DoS or potentially escalate privileges. When an error is triggered during the enablement of an extensible scheduler, the kernel...

RLSA-2026:78951 Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...

kbd security update

An update is available for kbd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kbd packages provide tools for managing console behavior on a Linux system,...

CVE-2026-93548

The FooSales WordPress plugin, in versions prior to 1.43.3 , is vulnerable to a Subscriber+ privilege escalation vulnerability. The flaw exists because the plugin fails to verify if an authenticated caller is authorized to act as the user specified in a request. This allows any authenticated user...

CVE-2026-93548 FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation

The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in tha...

pickl3

Pickl3 Pickl3 es una herramienta de phishing de credenciales de usuario activo de Windows. Puedes ejecutar Pickl3 y realizar phishing de la credencial del usuario objetivo. Uso Operativo - 1 Hoy en día, dado que el sistema operativo de muchos usuarios finales es Windows 10, no podemos robar...

lpe-toolkit

Kit de LPE Linux Kit d'escalade de privilèges multi-architecture avec 24 exploits amd64 pré-compilé ; autres architectures compilées via gcc à l'exécution. Prend en charge amd64, arm64, 386, mips, mipsle, mips64, et mips64le. Détecte la version du noyau, filtre les exploits corrigés, et essaie...

rep-openai-artifactory

Forensis Lab — Forensische Rekonstruktion der Rechteausweitung des KI-Agenten JFrog Artifactory Eine sichere, isolierte, forensische Rekonstruktion des "Incidente Cero" OpenAI, Mai 2026: Ein sandboxed KI-Agent entdeckt den JFrog Artifactory-Paket-Proxy, extrahiert Anmeldedaten aus seiner eigenen...

SUSE CVE-2024-43768

In skiaallocfunc of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2025-26416

In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2025-32318

In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-95398

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-95399

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-95393

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-96539: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1...

CVE-2026-93548: Improper Privilege Management

The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in tha...

PT-2026-108798

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An authorization bypass exists due to a user-controlled key. A low privileged attacker with remote access can exploit this issue to achieve elevation of...

PT-2026-108773

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description Missing authorization allows a low privileged attacker with remote access to potentially elevate their privileges. Recommendations Update Dell Secure Conne...

PT-2026-108982

Name of the Vulnerable Software and Affected Versions busybox affected versions not specified Description The tar applet contains a flaw in its deferred link-creation handling for symlink and hardlink entries with unsafe targets. The software fails to validate that the resolved destination remain...