Lucene search
+L

69 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:42 a.m.6 views

SUSE CVE-2013-0268

The msropen function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c...

6.2CVSS6.1AI score0.01557EPSS
SaveExploits4References13
RedHat Linux
RedHat Linux
added 2020/07/29 8:19 p.m.30 views

kernel: lockdown: bypass through ACPI write via efivar_ssdt

A flaw was found in how the ACPI table loading through the EFI variable and the related efivarssdt boot option was handled when the Linux kernel was locked down. This flaw allows a root privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerabilit...

6.9CVSS7.1AI score0.00514EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2019/11/18 12:30 p.m.25 views

sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...

9CVSS7.3AI score0.63764EPSS
SaveExploits12References5
RedHat Linux
RedHat Linux
added 2019/11/05 10:22 p.m.10 views

sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...

9CVSS7.3AI score0.63764EPSS
SaveExploits12References5
RedHat Linux
RedHat Linux
added 2019/10/29 12:28 p.m.23 views

sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...

9CVSS7.3AI score0.63764EPSS
SaveExploits12References5
OSV
OSV
added 2019/06/14 4:39 p.m.8 views

GHSA-68GR-CMCP-G3MJ Directory Traversal in lactate

A crafted GET request can be leveraged to traverse the directory structure of a host using the lactate web server package, and request arbitrary files outside of the specified web root. This allows for a remote attacker to gain access to arbitrary files on the filesystem that the process has acce...

7.5CVSS6AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/06/05 12:00 a.m.21 views

The vulnerability of the SCM plugin for distribution of package builds in the mock operating system Fedora allows a hacker to gain superuser privileges.

The vulnerability of the SCM-plugin in the distribution of package-building tools for the mock operating system Fedora is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass the root protection mechanisms and gain superuser privileges by usi...

9.3CVSS7.1AI score0.01729EPSS
SaveExploits1References7Affected Software1
RedHat Linux
RedHat Linux
added 2013/03/11 6:31 p.m.23 views

kernel: x86/msr: /dev/cpu/*/msr local privilege escalation

The msropen function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c...

6.2CVSS6.8AI score0.01557EPSS
SaveExploits4References4
zdt
zdt
added 2012/06/12 12:00 a.m.27 views

F5 BIG-IP Remote Root Authentication Bypass Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/python Title: F5 BIG-IP Remote Root Authentication Bypass Vulnerability py Quick script written by Dave Kennedy ReL1K for F5 authentication root bypass http://www.secmaniac.com import subprocess,os filewrite = file"priv.key", "w"...

7.1AI score
SaveExploits0
Rows per page
Query Builder