PoC_CVE-2023-24055

PoCCVE-2023-24055 実行方法？ スクリプト内の$User変数を編集し、値をあなたのユーザー名に置き換えてください。 管理者としてPowerShellを開き、スクリプトを実行してください： root@kitploit: ./PoCCVE-2023-24055.ps1 スクリプト実行後にKeePassを開いてください。 結果は"C:\Users\yourusername\AppData\Local\Temp\output.xml"に保存されます。 パスワードは平文で以下のように保存されます： root@kitploit: Password ExempePassword ソース...

printix-CVE-2022-25090

CVE-2022-25090 ユーザーとして宿題を印刷する代わりに、お楽しみとしてシステムのセキュリティポリシーを SYSTEM として印刷しましょう。 ドキュメントを参照 » デモを見る . バグを報告 . 機能をリクエスト 目次 プロジェクトについて 使用技術 はじめに 前提条件 インストール 使用方法 ロードマップ 貢献 ライセンス 著作者 謝辞 プロジェクトについて Printix の "Printix Secure Cloud Print Management" バージョン 1.3.1106.0 以下に含まれる PrintixService.exe...

CVE-2014-5284

CVE-2014-5284 CVE-2014-5284のBash実装 エクスプロイトタイトル: ossec 2.8 安全でない一時ファイル作成の脆弱性による権限昇格 Pythonは便利ですが、常に機能するわけではありません エクスプロイト作成者: mbadanoiu Pythonエクスプロイト作成者: skynet-13 ベンダーホームページ: www.ossec.net/ ソフトウェアリンク: https://github.com/ossec/ossec-hids/archive/2.8.1.tar.gz バージョン: OSSEC - 2.8 研究に基づいて作成 Jeff Peters...

Safenet_SAC_CVE-2021-42056

Safenet Authentication Client の特権昇格 CVE-2021-42056 Thales のウェブサイト 1 によると、SafeNet Authentication Client は、eTokens、SafeNet IDPrime スマートカード、USB およびソフトウェアベースのデバイスなど、Thales の広範な SafeNet ポートフォリオに含まれる証明書ベースの認証デバイスを管理するミドルウェアクライアントです。 複数のファイルに不適切な権限が設定されており、root ユーザーとしてのファイル上書きに加え、特権昇格（複数の手順が必要）が可能になっていま...

CVE-2026-40635

Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering...

CVE-2026-40635

Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering...

EUVD-2026-75103

Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering...

CVE-2026-40635

Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an insecure temporary file vulnerability. A low-privileged remote attacker could potentially exploit this to achieve denial of service and information tampering , with a CVSS 3.1 base score of 5.4 (MEDIUM) . Exploitation details are...

gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

A flaw was found in the gzexe utility of GNU gzip. When the mktemp utility is not available, gzexe creates temporary files with predictable names based on the process ID. A local attacker can exploit this by pre-creating a symbolic link to an arbitrary file at the predicted temporary file path...

CVE-2026-69482

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

EUVD-2026-73516

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

CVE-2026-69482

Windows Error Reporting contains a local tampering vulnerability caused by the creation of a temporary file in a directory with insecure permissions , allowing an authorized attacker to tamper with data locally. The vulnerability is rated CVSS 7.1 (HIGH) with a vector of local attack, low complex...

Windows Error Reporting Tampering Vulnerability

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

CVE-2026-85028

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

EUVD-2026-70652

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-85028

CVE-2026-85028 affects the FPGA management tool installation component of AWS FPGA Development Kit (aws-fpga) prior to version 2.3.4 . The root cause is the creation of a temporary file in a world-writable directory with insecure permissions. A local attacker with low privileges can place crafted...

CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

gzip security update

1.12-2 - Fix an issue with a temporary file creations when mktemp is missing 41991 - Fix a global buffer overflow vulnerability in the LZH decompression logic 41992 Resolves: CVE-2026-41991 Resolves: CVE-2026-41992...

ALSA-2026:61623 Moderate: gzip security update

The gzip packages contain the gzip GNU zip data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fixes: gzip: gzip: Arbitrary file overwrite via insecure...

CVE-2026-81572

CodeMeter Runtime (WibuSystems) on Windows is vulnerable to a local privilege escalation via a predictable temporary file. The cmu.exe executable, when invoked with --create-io --file C:, creates a temporary file under C:\CM-Stick without checking the directory and file paths for NTFS reparse poi...