4733 matches found
CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation
CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation This repository contains a Proof of Concept PoC for CVE-2025-6019, a Race Condition vulnerability in udisks2 that allows local privilege escalation via XFS filesystem resizing. 🎯 Target Environments & Compatibility This exploit is...
cve-2024-30088-binary-LPE-PRIVIELEGE-ESCALATION-CYGHT-TOCTOU
This repository does not have a README...
SSRF-CVE-2020-15002
Summary The URL validation logic applied when handling /appsuite/api/oxodocumentfilter&action=addfile suffers from three defects which can be used to execute Time of Check Time of Use ToCToU SSRF attack. This issue allows malicious actors to execute HTTP GET requests on internal network services...
CVE-2026-51385
CVE-2026-51385 Advisory for CVE-2026-51385. Needed to publish it as GRAPHIFY hasnt recognized the advisory neither publish it, and MITRE assigned CVE-2026-51385, this is the advisory for it. ES: Este fue mi primer cve, para ser honesto encontre una manera de romper la logica en la funcion ANTI...
CVE-2026-99129
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
EUVD-2026-111881
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
CVE-2026-99129
The Linux kernel contains a vulnerability in selinux related to BPF token permission checks. The issue stems from multiple lookups of the bpffs creator SID using the token's file descriptor, rather than using the resolved path/dentry (in selinux_bpf_token_create()) or the token itself (in selinux...
CVE-2026-99129 selinux: fix BPF token permission checks
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
CVE-2026-99129 selinux: fix BPF token permission checks
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
PT-2026-128122
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinux bpf token create or the tok...
UBUNTU-CVE-2026-99129
In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry in selinuxbpftokencreate or the token...
Linux Distros Unpatched Vulnerability : CVE-2026-99129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be foun...
MGASA-2026-0560 Updated util-linux package fixes security vulnerabilities
Additional fix for CVE-2024-28085. Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown. CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount8 — Target Path Redirection. CVE-2026-53613 Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable —...
Updated util-linux package fixes security vulnerabilities
Additional fix for CVE-2024-28085. Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown. CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount8 — Target Path Redirection. CVE-2026-53613 Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable —...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
CVE-2024-50379 - Apache Tomcat Race Condition RCE By Gh0st-...
CVE-2026-92374
A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...
GHSA-RXJ4-H86G-25GC PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service
Summary The SpreadsheetML XML reader Reader\Xml scans file content twice through XmlScanner::scan, and each scan runs an unentity callback that calls htmlentitydecode after the pattern check. By double-encoding the toUtf8$xml; if pregmatch$pattern, $xml // CHECK 2 UTF-8 throw new Exception'Detect...
PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service
Summary The SpreadsheetML XML reader Reader\Xml scans file content twice through XmlScanner::scan, and each scan runs an unentity callback that calls htmlentitydecode after the pattern check. By double-encoding the toUtf8$xml; if pregmatch$pattern, $xml // CHECK 2 UTF-8 throw new Exception'Detect...
CVE-2026-92374
TeamViewer Full Client and Host for macOS prior to version 15.83 are vulnerable to a local privilege escalation via a TOCTOU race condition and improper symbolic link handling in the privileged helper. A local attacker with low privileges can bypass installer package verification to install a mal...
EUVD-2026-111074
A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...