15838 matches found
needrestart: Multiple vulnerabilities
Background needrestart is a tool to restart daemons after library updates. Description Multiple vulnerabilities have been discovered in needrestart. Please review the CVE identifier referenced below for details. Impact An attacker could achieve root privilege escalation. Workaround There is no...
M3200-OpenUI
Inseego M3200 Root Exploit A single-file exploit that takes t...
Exploit for CVE-2026-66747
OIEH Router Checker 내 공유기가 중국산 백도어ENDLESSDOORS에 해당하는지 클릭...
Exploit for Improper Authentication in Apple Macos
CVE-2026-65400 — macOS Screen Sharing pre-auth root file read...
Security Bulletin: This Power System update is being released to address CVE-2026-17063
Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state, potentially affecting the managed system and all hosted partitions,...
CVE-2026-63343 Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a metadata.yaml symlink pointing to an arbitrary host path allows an authenticated Incus user to read or overwrite any file on the host as root via the instance metadata API. The...
CVE-2026-63343 Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a metadata.yaml symlink pointing to an arbitrary host path allows an authenticated Incus user to read or overwrite any file on the host as root via the instance metadata API. The...
CVE-2026-48769
CVE-2026-48769 is a critical (CVSS 9.9) arbitrary file write vulnerability in Incus , a system container and virtual machine manager, affecting versions prior to 7.2.0 . The root cause is that the Incus client trusts a crafted Incus-Image-Hash header returned by a malicious image server, leading ...
CVE-2026-48769
Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...
CVE-2026-61400 Apache CloudStack: Get and Run Diagnostics Command Injection
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache CloudStack's run and get diagnostics functionality for the system VMs and virtual routers. An authenticated user holding the permissions required to invoke either getDiagnosticsData or...
CVE-2026-76156: Improper Neutralization of Special Elements used in an OS Command
OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...
CVE-2026-48769: Improper Input Validation
Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...
CVE-2026-19449
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root...
CVE-2026-19449
CVE-2026-19449 is a local privilege escalation vulnerability in the cmdnim component of IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . An unprivileged local user can exploit it to execute arbitrary code with root privileges. The CVSS 3.1 score is 8.8 (HIGH) with a changed scope, reflecting full comp...
CVE-2026-19755 NoSleep 1.5.1 - Unauthorized disclosure of root-owned files through privileged XPC helper
NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1...
CVE-2026-18273
CVE-2026-18273 is a local privilege escalation vulnerability in the Kenwood DNR1007XR car audio/navigation unit. The root cause is incorrect default permissions on a directory used as the USB filesystem mount point , allowing a physically present attacker with low-privileged code execution to esc...
EUVD-2026-63417
Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on t...
CVE-2026-18268 Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability
Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the targe...
EUVD-2026-63415
Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the targe...