CVE-2024-33352

CVEID : CVE-2024-33352 Bluestacks Advisory ID : pending Name of the affected products and versions : BlueStacks for Windows versions prior to 10.40.1000.502 Vulnerability type : CWE-552: Files or Directories Accessible to External Parties Summary BlueStacks is an Android emulator which runs the...

Linux-Privilege-Escalation-CVE-2025-27591

CVE-2025-27591 - Escalada de Privilegios mediante Enlace Simbólico Escribible en below Resumen Este es un exploit simple para CVE-2025-27591 , una vulnerabilidad de escalada de privilegios local en la herramienta de monitoreo del sistema Linux below. La vulnerabilidad afecta a versiones anteriore...

CVE-2025-27591-PoC

CVE-2025-27591 PoC: Escalada de Privilegios Local en Below v0.9.0 Prueba de Concepto para CVE-2025-27591, una vulnerabilidad que permite a usuarios locales sin privilegios escalar sus privilegios a root mediante ataques de enlace simbólico. 🕵️‍♂️ Detalles Técnicos La vulnerabilidad afecta al...

CVE-2025-27591-PoC

CVE-2025-27591 Prueba de Concepto CVE-2025-27591 es una vulnerabilidad de escalada de privilegios que afectó al servicio Below antes de la versión 0.9.0. El problema surgió debido a la creación de un directorio con permisos de escritura mundial en /var/log/below. Un atacante podría explotar esta...

CVE-2025-27591

CVE-2025-27591 Exploit de escalada de privilegios PoC para Below v0.9.0 Descargo de responsabilidad Este exploit está destinado únicamente con fines educativos. Está diseñado para ayudar a los usuarios a comprender las vulnerabilidades de seguridad y mejorar sus conocimientos sobre ciberseguridad...

CVE-2025-70341

CVE-2025-70341: Insecure Permissions + Arbitrary Code Execution in App-Auto-Patch Summary App-Auto-Patch v3.4.2 creates its working directory with world-writable permissions chmod 777, enabling a local TOCTOU time-of-check-time-of-use race condition. An unprivileged local attacker can exploit thi...

CVE-2025-27591

CVE-2025-27591 – below 中通过符号链接滥用的权限提升 🛑 免责声明 ：本利用程序仅供教育和授权的安全测试使用 。未经授权使用可能违法。 🧠 概述 below 是 Facebook 为 Linux 系统开发的一款性能监控工具。在修补版本发布之前的部分 below 版本存在一个严重漏洞，该漏洞通过利用全局可写日志目录 和未经过滤的日志处理，允许非特权用户 提升权限至 root 。 🔎 CVE 详情 字段| 值 ---|--- CVE-ID| CVE-2025-27591 严重性| 🔥 严重 CVSS ≈ 7.8 - 8.8 攻击向量| 本地 影响| 权限提升至 root...

CVE-2024-28589

CVE-2024-28589 在 Axigen Mail Server for Windows 中发现了一个漏洞，影响所有版本至 10.5.18，该漏洞允许本地权限提升。 描述： Axigen Mail Server 被发现存在因不安全地从全局可写目录加载 DLL 而导致的本地权限提升漏洞。在“Axigen Mail Server”服务启动期间（该服务以 SYSTEM 权限运行），它会搜索一个不存在的目录。具有本地访问权限的攻击者可以创建此目录，并将恶意 DLL 文件放入其中。当服务启动时，它会尝试加载此目录中的所有 DLL 文件，从而使攻击者的代码以 SYSTEM 权限执行。 受影响版...

CVE-2024-34474

CVE-2024-34474 Clario hasta el 11 de abril de 2024 para Windows Desktop tiene permisos débiles para %PROGRAMDATA%\Clario e intenta cargar DLLs desde allí como SYSTEM. Descripción: Clario para Windows desktop intenta cargar bibliotecas DLL no existentes desde C:\ProgramData\Clario\ y...

CVE-2026-18567

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

CVE-2026-18567

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by a TOCTOU race condition (CWE-367) involving a predictable Unix domain socket path in a world-writable directory. A local attacker with low privileges could exploit this to obtain information and cause minor availability impact, rated...

EUVD-2026-71602

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

PT-2026-85690

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...

CVE-2026-85028

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

EUVD-2026-70652

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

PT-2026-85210

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...