1515 matches found
CVE-2020-7468
In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...
CVE-2020-12487
Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege...
CVE-1999-0405
A buffer overflow in lsof allows local users to obtain root privilege...
CVE-1999-0406
Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege...
Exploit for Deserialization of Untrusted Data in Apache Activemq
Broker Machine Pentesting Report Target & Overview - Mac...
PT-2026-6750
Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 20.7-cert9 Asterisk versions prior to 20.18.2 Asterisk versions prior to 21.12.1 Asterisk versions prior to 22.8.2 Asterisk versions prior to 23.2.2 Description The asterisk/contrib/scripts/ast coredumper script runs...
CVE-2025-69257 theshit vulnerable to unsafe loading of user-owned Python rules when running as root.
theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when...
📄 Ilevia EVE X1/X5 Server 4.7.18.0.eden Root Privilege Escalation
A critical privilege escalation vulnerability exists in Ilevia EVE X1/X5 Server versions 4.7.18.0.eden and below. This is a proof of concept exploit written in PHP...
CVE-2025-67736
The FreePBX module tts Text to Speech for FreePBX, an open-source web-based graphical user interface GUI that manages Asterisk. Versions prior to 16.0.5 and 17.0.5 are vulnerable to SQL injection by authenticated users with administrator access. Authenticated users with administrative access to t...
CVE-2025-43467
CVE-2025-43467 affects macOS Tahoe prior to 26.1. The vulnerability is an undercheck flaw that could allow an unprivileged app to gain root privileges via local access. Apple’s security content notes the fix is in macOS Tahoe 26.1 with improved checks; Red Hat/NVD entries corroborate a root-privi...
EUVD-2025-203095
An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...
PT-2025-50728
Name of the Vulnerable Software and Affected Versions cPanel versions 110 through 132 Description A directory traversal issue exists within the Team Manager API. This allows for the overwriting of arbitrary files, potentially leading to privilege escalation to the root user. Recommendations Updat...
CVE-2025-66429
A directory traversal vulnerability exists in cPanel versions 110 through 132 within the Team Manager API . The root cause is improper limitation of pathnames to a restricted directory, which allows an attacker to overwrite arbitrary files . This vulnerability can be exploited to achieve privileg...
GHSA-QWCC-2R77-5W2F sd changes the group ownership of the source file
An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command...
CVE-2025-65807
An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command...
CVE-2025-65807
An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command...
Linux Distros Unpatched Vulnerability : CVE-2025-65807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command. CVE-2025-65807 Note that Nessus relies on the...
CVE-2025-65807
An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command...
