4590 matches found
PT-2026-69840
Name of the Vulnerable Software and Affected Versions systemd-homed affected versions not specified Description The systemd-homed daemon contains a local privilege escalation flaw resulting from insecure privilege management. An attacker can exploit this issue by adding an arbitrary system group ...
Photon OS 5.0: Systemd PHSA-2026-5.0-91-0819
An update of the systemd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0819. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-16742: Improper Privilege Management
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
PT-2026-69838
Name of the Vulnerable Software and Affected Versions systemd-oomd affected versions not specified Description Local unprivileged users can terminate arbitrary local processes through a systemd-oomd IPC API. This is possible due to a missing path traversal validation, which allows an attacker to...
PT-2026-69839
Name of the Vulnerable Software and Affected Versions systemd-machined versions 258 through 259 and later Description When running on a desktop system, an unprivileged user logged into a desktop graphical session can terminate arbitrary processes, including those with higher privileges. This issu...
CVE-2026-16742: Improper Privilege Management
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
CVE-2026-15060: Improper Access Control
When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...
CVE-2026-15059: Improper Limitation of a Pathname to a Restricted Directory
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...
RPM Package Creator (Kitty Agent)
Builds a noarch RPM with Kitty HTTP polling agent and systemd persistence. Pure Python generation works on Windows/macOS/Linux. Controller: listeners/multi/reversehttppolling. from kittysploit import import os import shutil from pathlib import Path from lib.c2.agentinstaller import buildsystemdun...
Covert Channel Agent Installer Pack
Writes email or Slack polling agent plus Linux systemd / Windows schtasks install scripts. Email: listeners/email/reverseemail. Slack: listeners/messaging/slacksocketmode. from kittysploit import from lib.c2.agentinstaller import buildinstallreadme, buildlinuxinstallsh,...
MAL-2026-13632 Malicious code in map-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80727943437a7e22116b369c010fc965c4854a0c58a053504c4bc55555e90dd4 On import, dist/index.mjs chmods 0755 and spawns the bundled Linux x8664 binary dist/internal/calc-math.dat as a detached background process. The...
Malicious code in map-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80727943437a7e22116b369c010fc965c4854a0c58a053504c4bc55555e90dd4 On import, dist/index.mjs chmods 0755 and spawns the bundled Linux x8664 binary dist/internal/calc-math.dat as a detached background process. The...
EulerOS 2.0 SP11 : systemd (EulerOS-SA-2026-3106)
According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.CVE-2026-40226 In udev in...
EulerOS 2.0 SP11 : systemd (EulerOS-SA-2026-3160)
According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.CVE-2026-40226 In udev in...
MAL-2026-13628 Malicious code in streak-map-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2790159028b31b656c9e704c3a0e4b1a5d114042e0d92c601d133057f760b537 streak-map-kit is advertised as a dependency-free calendar-day/streak math library but ships a Linux ELF at dist/internal/calc-mapping.bin framed as ...
Malicious code in streak-map-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2790159028b31b656c9e704c3a0e4b1a5d114042e0d92c601d133057f760b537 streak-map-kit is advertised as a dependency-free calendar-day/streak math library but ships a Linux ELF at dist/internal/calc-mapping.bin framed as ...
RHSA-2026:51277 Red Hat Security Advisory: systemd security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:51134 Red Hat Security Advisory: systemd security, bug fix, and enhancement update
Bulletin has no description...
RHEL 9 : systemd (RHSA-2026:51277)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51277 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...
CVE-2026-16552
REJECTED A flaw was found in systemd-tmpfiles. When processing a tmpfiles.d configuration entry that writes to a file, systemd-tmpfiles can follow a symbolic link placed by an unprivileged local user, and an existing safety check does not detect this specific case because it always treats...