6352 matches found
📄 Below Log File Symlink Privilege Escalation
This Metasploit module exploits a local privilege escalation vulnerability in the below utility when executed with sudo. This affects versions prior to 0.9.0. ================================================================================================================================== | Title...
📄 Below Symlink Privilege Escalation
This Python script demonstrates a potential privilege escalation technique related to CVE-2025-27591, leveraging symbolic link symlink manipulation in a logging directory used by the below utility. Versions prior to 0.9.0 are affected...
CVE-2026-31014
CVE-2026-31014 affects Dovestones Softwares AD Self Update
WordPress WooCommerce PDF Invoices & Packing Slips plugin < 5.9.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions 5.9.0...
WordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Elementra versions = 1.0.9...
Using Vulnerable Libssh Version < 0.12 in Sentry
Last Modified Date Apr 20, 2026 4:13:44 AM...
Tenable Identity Exposure < 3.77.17 Multiple Vulnerabilities (TNS-2026-11)
The version of the Tenable Identity Exposure running on the remote host is prior to 3.77.17. It is, therefore, affected by multiple vulnerabilities according to advisory TNS-2026-11: - A flaw in Node.js's Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictio...
CVE-2026-34445 affecting package pytorch for versions less than 2.2.2-14
CVE-2026-34445 affecting package pytorch for versions less than 2.2.2-14. A patched version of the package is available...
WordPress WpStream plugin < 4.11.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Muhammad Sharief in WordPress Plugin WpStream versions 4.11.2...
CVE-2026-33671 affecting package nodejs24 for versions less than 24.14.1-2
CVE-2026-33671 affecting package nodejs24 for versions less than 24.14.1-2. A patched version of the package is available...
CVE-2026-33672 affecting package nodejs24 for versions less than 24.14.1-2
CVE-2026-33672 affecting package nodejs24 for versions less than 24.14.1-2. A patched version of the package is available...
CVE-2026-31843
The goodoneuz/pay-uz Laravel package = 2.2.24 contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers to overwrite existing PHP payment hook files. The endpoint is exposed via Route::any without authentication middleware, enabling remot...
CVE-2026-35469 affecting package containerd2 for versions less than 2.0.0-19
CVE-2026-35469 affecting package containerd2 for versions less than 2.0.0-19. A patched version of the package is available...
CVE-2026-33056 affecting package rust for versions less than 1.75.0-28
CVE-2026-33056 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
CVE-2025-69652 affecting package binutils for versions less than 2.41-11
CVE-2025-69652 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...
CVE-2026-34743 affecting package rust for versions less than 1.75.0-28
CVE-2026-34743 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
CVE-2026-33055 affecting package rust for versions less than 1.75.0-28
CVE-2026-33055 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
CVE-2026-34743 affecting package rust for versions less than 1.90.0-7
CVE-2026-34743 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...