73653 matches found
EUVD-2026-88260
Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...
CVE-2026-87799
Canonical LXD versions 4.0 and later on Linux (fixed in 4.0.14, 5.0.10, 5.21.8, and 6.10) are vulnerable to an arbitrary file write due to improper link resolution in the migration receive path. An authenticated client capable of creating instances or custom storage volumes, or a malicious migrat...
CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root
Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...
CVE-2026-85185
Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...
CVE-2026-85185
Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8, and 6.10) on Linux are vulnerable to a path traversal flaw in the btrfs storage driver . An authenticated client with instance creation permissions can use crafted subvolume paths containing ../ sequences to delete arbitrary...
CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root
Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...
CVE-2026-85526 Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD
Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...
CVE-2026-85526 Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD
Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...
CVE-2026-85526 Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD
Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...
CVE-2026-85526
Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...
CVE-2026-85526
A path traversal vulnerability exists in the Btrfs storage driver (specifically the unpackVolume function) within Canonical LXD on Linux. An authenticated user with instance creation privileges can manipulate the host filesystem as root by providing a crafted subvolumes[].path entry in backup/opt...
ROOT-APP-PYPI-CVE-2026-50271 CVE-2026-50271 in ddtrace - Patched by Root
Root has patched CVE-2026-50271 in the ddtrace package for Root:PyPI. Multiple fixed versions available...
CVE-2026-82928
mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorizedkeys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected devic...
Root-My-Galaxy
Root My Galaxy Root My Galaxy is a one-click installer for explicitly supported Samsung model and kernel combinations. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build artifacts. Latest release The device feed and native payloads are...
cve-2014-0038
Local root exploit for CVE-2014-0038 Error: La llamada al sistema X86X32 recvmmsg no sanitiza correctamente el puntero de tiempo de espera recibido desde el espacio de usuario. Primitiva del exploit: Pasar un puntero a una dirección del kernel como tiempo de espera para recvmmsg; si se conoce el...
ROOT-APP-NPM-CVE-2023-26136 CVE-2023-26136 in tough-cookie - Patched by Root
Root has patched CVE-2023-26136 in the tough-cookie package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-42767 CVE-2026-42767 in openssl - Patched by Root
Root has patched CVE-2026-42767 in the openssl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-75803 CVE-2026-75803 in openssl - Patched by Root
Root has patched CVE-2026-75803 in the openssl package for Root:Debian:12. Multiple fixed versions available...