Lucene search
+L

307 matches found

NVD
NVD
added 2026/03/05 1:15 a.m.23 views

CVE-2026-29121

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS0.00148EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/03/05 12:53 a.m.6 views

CVE-2026-29122 `/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE

International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS6AI score0.00139EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/05 12:53 a.m.23 views

CVE-2026-29122

International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS6AI score0.00139EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/05 12:48 a.m.7 views

CVE-2026-29121

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS6AI score0.00148EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/03/05 12:48 a.m.8 views

CVE-2026-29121 `/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS5.8AI score0.00148EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/05 12:48 a.m.47 views

CVE-2026-29121

IDC SFX2100 satellite receiver ships with /sbin/ip setuid, enabling local privilege escalation; a local user can leverage GTFObins ip to read root files and potentially perform additional privileged actions on the local system.

9.2CVSS6AI score0.00148EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2026/03/04 6:31 p.m.16 views

EUVD-2026-9456

A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating...

5.9CVSS6.1AI score0.0042EPSS
SaveExploits0References2
Cisco
Cisco
added 2026/03/04 4:00 p.m.21 views

Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software Path Traversal Vulnerability

A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating...

5.9CVSS6.1AI score0.0042EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/04 12:00 a.m.16 views

Cisco Secure Firewall Management Center和Cisco Secure Firewall Threat Defense 安全漏洞

Cisco Secure Firewall Management Center and Cisco Secure Firewall Threat Defense are products of Cisco, a company based in the United States. Cisco Secure Firewall Management Center is a powerful network security management tool. Cisco Secure Firewall Threat Defense is an integrated firewall...

5.9CVSS6AI score0.0042EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/02/04 7:28 p.m.17 views

CVE-2025-52627

Root File System Not Mounted as Read-Only configuration vulnerability. This can allow unintended modifications to critical system files, potentially increasing the risk of system compromise or unauthorized changes.This issue affects AION: 2.0...

7.5CVSS5.4AI score0.00154EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/03 6:16 p.m.17 views

CVE-2025-52627

Root File System Not Mounted as Read-Only configuration vulnerability. This can allow unintended modifications to critical system files, potentially increasing the risk of system compromise or unauthorized changes.This issue affects AION: 2.0...

7.5CVSS5.8AI score0.00154EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/03 5:44 p.m.7 views

CVE-2025-52627

Root File System Not Mounted as Read-Only configuration vulnerability. This can allow unintended modifications to critical system files, potentially increasing the risk of system compromise or unauthorized changes.This issue affects AION: 2.0...

5.5CVSS5.4AI score0.00154EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/02/03 5:44 p.m.9 views

EUVD-2025-206681

Root File System Not Mounted as Read-Only configuration vulnerability. This can allow unintended modifications to critical system files, potentially increasing the risk of system compromise or unauthorized changes.This issue affects AION: 2.0...

5.5CVSS5.4AI score0.00154EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.38 views

PT-2026-5903

Name of the Vulnerable Software and Affected Versions AION version 2.0 Description A configuration issue exists where the root file system is not mounted as read-only. This can allow unintended modifications to critical system files, potentially increasing the risk of system compromise or...

7.5CVSS5.5AI score0.00154EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/29 12:00 a.m.19 views

TP-Link VX800v security vulnerability

The TP-Link VX800v is a VoIP gateway produced by the TP-Link company. The TP-Link VX800v 1.0 version has a security vulnerability. This vulnerability stems from improper parsing of USB HTTP access path links, which may allow custom USB devices to expose the contents of the root file system...

5.1CVSS5.8AI score0.00191EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/07 9:40 a.m.28 views

CVE-1999-0325

vheumnt program in HP-UX allows local users to create root files through symlinks...

7.2CVSS6.7AI score0.00529EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/23 10:15 p.m.12 views

CVE-2025-13698

Deciso OPNsense diagbackup.php filename Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows network-adjacent attackers to create arbitrary files on affected installations of Deciso OPNsense. Authentication is required to exploit this vulnerability. The specific fl...

4.5CVSS0.00618EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/12 4:15 p.m.15 views

CVE-2025-65530

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

8.8CVSS5.9AI score0.00302EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/12 12:00 a.m.46 views

CVE-2025-65530

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

0.00302EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/12 12:00 a.m.16 views

CloudLinux OS 安全漏洞

CloudLinux OS is an operating system from the American company CloudLinux. A security vulnerability exists in CloudLinux OS versions prior to 32.7.4, which stems from an eval injection in malware anti-obfuscation routines that allows an attacker to overwrite arbitrary files by scanning specially...

8.8CVSS7.1AI score0.00302EPSS
SaveExploits0References3
Rows per page
Query Builder