Linux-Privilege-Escalation-CVE-2025-27591

CVE-2025-27591 - Privilege Escalation via Writable Symlink in below Summary This is a simple exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below Linux system monitoring tool. The vulnerability affects versions prior to v0.9.0 and stems from incorrect permission...

CVE-2025-27591_PoC

Proof-Of-Concept Usage 1. build root@kitploit: go build -o poc exploit.go 2. move the binary to the target machine https://github.com/user-attachments/assets/d5e3f8e7-ba05-42f8-a533-21179cd77177 References https://nvd.nist.gov/vuln/detail/CVE-2025-27591...

below-log-race-poc

below-log-race-poc Exploit CVE-2025-27591 Escalada de privilegios de below Descripción Este repositorio contiene una prueba de concepto PoC para CVE-2025-27591 , una vulnerabilidad de escalada de privilegios en la utilidad below. El problema surge porque below maneja incorrectamente los archivos ...

CVE-2025-27591

Below - Local Privilege Escalation CVE-2025-27591 Below .log to any root-owned file like /etc/passwd. When below snapshot is executed with sudo, it forcibly sets mode 0666 on the log file and writes to it—even if it's a symlink. This allows injection of a root-privileged user without password,...

📄 Below Log File Symlink Privilege Escalation

This Metasploit module exploits a local privilege escalation vulnerability in the below utility when executed with sudo. This affects versions prior to 0.9.0. ================================================================================================================================== | Title...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 — Meta below Symlink Local Privilege Escalati...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 Below v0.9.0 PoC Privilege Escalation Expl...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 – Privilege Escalation via Symlink Abuse in be...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 – Privilege Escalation via Symlink Abuse in be...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

Proof-Of-Concept Usage 1. build bash go build -o poc e...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 - Privilege Escalation via Writable Symlink in...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

Below - Local Privilege Escalation CVE-2025-27591 B...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 - Privilege Escalation via below This reposi...

CVE-2025-27591

creationtimestamp| type| source ---|---|--- 2025-03-11 21:48:55+00:00| seen| https://t.me/cvedetector/20126 2025-03-12 12:00:41+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lk6ju6fw642e 2025-03-12 12:09:31+00:00| seen|...

CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...

CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...

CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...