CVE-2024-32019-POC

⚠️ CVE-2024-32019 - PoC 📌 Versiones Afectadas = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ Prueba de Concepto CVE-2024-32019 — escalada local de privilegios de ndsudo mediante ruta de búsqueda no confiable. 🔧 Compilar el Exploit root@kitploit: x8664-linux-gnu-gcc -o nvme exploit.c -static 📤 Desplegar en...

CVE-2024-50986

CVE-2024-50986: Exploit de secuestro de DLL para Clementine Descripción: Un problema en Clementine v.1.3.1 permite a un atacante local ejecutar código arbitrario mediante un archivo DLL manipulado. Versión afectada: Clementine v.1.3.1 Investigador: Utkarsh r1971d3 LinkedIn Enlace NIST CVE:...

DLL_Injection_On_VLC

Inyección de DLL y CVE-2010-3124 Descripción general 🌱 Este proyecto explora el tema de la inyección de DLL Dynamic Link Library y se centra específicamente en el CVE-2010-3124. CVE-2010-3124 se refiere a una vulnerabilidad de ruta de búsqueda no confiable encontrada en VLC Media Player versión...

CVE-2010-5230

CVE-2010-5230 Múltiples vulnerabilidades de ruta de búsqueda no confiable en MicroStation 7.1 permiten a usuarios locales obtener privilegios a través de un archivo Troyano 1 mptools.dll, 2 baseman.dll, 3 wintab32.dll o 4 wintab.dll en el directorio de trabajo actual, como se demuestra con un...

CVE-2024-6473-PoC

CVE-2024-6473 PoC Yandex Browser para escritorio anterior a 24.7.1.380 tiene una vulnerabilidad de DLL Hijacking porque se utiliza una ruta de búsqueda no confiable. Versión vulnerable del navegador !IMPORTANT Se debe apagar Internet durante la instalación, de lo contrario el navegador se...

CVE-2026-14673

An untrusted search path vulnerability in PostgreSQL's amcheck module allows a user with EXECUTE privileges to escalate privileges or execute arbitrary code. By setting a malicious search path before invoking an amcheck function, an attacker can hijack execution to run arbitrary SQL functions wit...

CVE-2024-32019-ndsudo

La vulnerabilidad ndsudo permite a un atacante obtener permisos de root explotando una ruta de búsqueda no confiable en la herramienta ndsudo, que forma parte del Netdata Agent. Esto puede permitir la ejecución de programas arbitrarios con privilegios elevados si el atacante coloca un binario...

Adobe Substance 3D Painter < 12.1.3 Multiple Vulnerabilities (APSB26-129)

The version of Adobe Substance 3D Painter installed on the remote host is prior or equal to 12.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-129 advisory. - Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104761 advisory. Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes...

CVE-2026-75768

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

EUVD-2026-65687

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

CVE-2026-75768 Substance3D - Painter | Untrusted Search Path (CWE-426)

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

CVE-2026-75768 Substance3D - Painter | Untrusted Search Path (CWE-426)

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

CVE-2026-75768

Adobe Substance3D - Painter is affected by an Untrusted Search Path vulnerability (CWE-426) that can lead to arbitrary code execution in the context of the current user. An attacker must convince a victim to open a malicious file , which triggers the exploitation path. The CVSS v3.1 score is 7.8 ...

Astra Linux – Vulnerability in Mariadb 10.3

A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server up to 2021-03-03; and the wsrep patch up to 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUP...

CVE-2026-78155

CVE-2026-78155 is a critical untrusted search path vulnerability in the StackGres operator that enables privilege escalation . A low-privilege tenant who owns a database can exploit this flaw to gain administrator privileges . The CVSS 3.1 score is 9.9 (Critical) with a network attack vector, low...

CVE-2026-78155 Untrusted Search Path in StackGres

privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges...

postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path

An untrusted search path vulnerability in PostgreSQL's amcheck module allows a user with EXECUTE privileges to escalate privileges or execute arbitrary code. By setting a malicious search path before invoking an amcheck function, an attacker can hijack execution to run arbitrary SQL functions wit...

BIT-POSTGRESQL-2026-14673 PostgreSQL amcheck does not clear untrusted search path

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...

SUSE CVE-2026-14673

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...