107 matches found
EUVD-2019-8363
Malware in sbrugna...
EUVD-2019-10557
Malware in sbrugna...
EUVD-2002-1122
Malware in sbrugna...
EUVD-2005-0653
Malware in sbrugna...
EUVD-2021-1691
Malware in sbrugna...
EUVD-2021-7300
Malicious code in bioql PyPI...
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
...
CVE-2025-53503
Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2025-52521
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2025-52521
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
Trend Micro Cleaner One Pro 安全漏洞
Trend Micro Cleaner One Pro is a computer cleaner and optimization software from Trend Micro. A security vulnerability exists in Trend Micro Cleaner One Pro that stems from an elevation of privilege vulnerability that could allow a local attacker to delete privileged files...
Microsoft Edge (Chromium-based) Privilege Escalation
This repository contains a conceptual proof-of-concept PoC for CVE-2025-47181, a link following privilege escalation vulnerability in Microsoft Edge Chromium-based. This vulnerability allows an attacker to exploit improper link resolution and symbolic link symlink handling by a trusted Edge updat...
CVE-2025-49385
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2025-49384
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2019-14783
On Samsung mobile devices with N7.x, and O8.x, P9.0 software, FotaAgent allows a malicious application to create privileged files. The Samsung ID is SVE-2019-14764...
CVE-2019-13528
A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 JACE 3e, JACE 6e, JACE 7, JACE-8000, Niagara 4.4u3 JACE 3e, JACE 6e, JACE 7, JACE-8000, and Niagara 4.7u1 JACE-8000, Edge 10...
CVE-2025-3047
When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...
AWS SAM CLI 安全漏洞
AWS SAM CLI is an Amazon Web Services open source CLI tool for building, testing, debugging and deploying serverless applications using AWS SAM. A security vulnerability exists in AWS SAM CLI that stems from a symbolic link that could lead to access to host privileged files...
CVE-2024-2746
Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemon into loading a user controlled "plugin". All of this happened before Polkit...
CVE-2024-47595
An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application...