Lucene search
K

31231 matches found

EUVD
EUVD
added 2026/03/05 3:31 a.m.7 views

EUVD-2026-9515

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS6.1AI score0.00127EPSS
Exploits1References2
EUVD
EUVD
added 2026/03/05 3:31 a.m.2 views

EUVD-2026-9513

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS6AI score0.00148EPSS
Exploits1References3
NVD
NVD
added 2026/03/05 2:16 a.m.5 views

CVE-2026-29122

International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS0.00139EPSS
Exploits1References2
CVE
CVE
added 2026/03/05 1:18 a.m.14 views

CVE-2026-29123

CVE-2026-29123 affects a SUID root-owned binary at /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux. The issue enables local privilege escalation through execution of the affected SUID binary, with attack methods including PATH hijacking, symlink abuse, or shared ...

8.6CVSS6.1AI score0.00127EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/05 1:18 a.m.5 views

CVE-2026-29123 Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS6.1AI score0.00127EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/03/05 1:18 a.m.31 views

CVE-2026-29123 Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS0.00127EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 1:18 a.m.3 views

CVE-2026-29123

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS6.1AI score0.00127EPSS
Exploits1References2
NVD
NVD
added 2026/03/05 1:15 a.m.9 views

CVE-2026-29121

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS0.00148EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/05 12:53 a.m.2 views

CVE-2026-29122 `/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE

International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS6AI score0.00139EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/03/05 12:53 a.m.28 views

CVE-2026-29122 `/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE

International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS0.00139EPSS
Exploits1References2
CVE
CVE
added 2026/03/05 12:48 a.m.13 views

CVE-2026-29121

IDC SFX2100 satellite receiver ships with /sbin/ip setuid, enabling local privilege escalation; a local user can leverage GTFObins ip to read root files and potentially perform additional privileged actions on the local system.

9.2CVSS6AI score0.00148EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/03/05 12:48 a.m.30 views

CVE-2026-29121 `/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS0.00148EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/05 12:48 a.m.3 views

CVE-2026-29121

International Data Casting IDC SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...

9.2CVSS6AI score0.00148EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.4 views

International Datacasting SFX2100 SuperFlex Satellite Receiver 安全漏洞

The International Datacasting SFX2100 SuperFlex Satellite Receiver is a professional broadcast-grade satellite signal receiving device developed by the International Datacasting company. The SFX2100 SuperFlex Satellite Receiver has a security vulnerability, which stems from the presence of binary...

8.6CVSS5.8AI score0.00119EPSS
Exploits1References1
Packet Storm News
Packet Storm News
added 2026/03/05 12:0 a.m.4 views

AirPlay RTSP Auditor

This Metasploit module is a hardened RTSP security auditing tool targeting Apple AirPlay services port 7000. It performs a structured authentication handshake using X25519 key exchange, derives shared secrets, and sends a dynamically constructed Apple Binary Property List bplist payload over RTSP...

5.9AI score
Exploits0
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.29 views

PT-2026-23098

Name of the Vulnerable Software and Affected Versions IDC SFX2100 satellite receiver affected versions not specified Description The /sbin/ip utility is installed with the setuid bit set on the IDC SFX2100 satellite receiver. This configuration allows any local user who can execute the binary to...

9.2CVSS5.8AI score0.00148EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.9 views

PT-2026-23100

Name of the Vulnerable Software and Affected Versions International Data Casting IDC SFX2100 affected versions not specified Description A SUID root-owned binary located in /home/xd/terminal/XDTerminal allows a local actor to potentially perform local privilege escalation depending on system...

8.6CVSS5.9AI score0.00127EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.3 views

PT-2026-23099

Name of the Vulnerable Software and Affected Versions IDC SFX2100 satellite receiver affected versions not specified Description The IDC SFX2100 satellite receiver includes the /bin/date utility installed with the setuid bit set. This configuration allows any local user who can execute the binary...

9.2CVSS5.9AI score0.00139EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2026/03/04 7:45 p.m.4 views

CVE-2025-64736

An out-of-bounds read vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch 5462afb0. A specially crafted .abf file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability...

7.1CVSS5.9AI score0.00184EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/04 1:44 p.m.5 views

CVE-2026-3463

A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binarywriter::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed...

7.8CVSS5.9AI score0.00195EPSS
Exploits1References1
Rows per page
Query Builder