87 matches found
CVE-2026-36213-poc
CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation https://img.shields.io/badge/platform-Windows-blue https://img.shields.io/badge/CVE-2026--36213-red https://img.shields.io/badge/EDB--ID-52615-orange Overview This repository contains a Python proof-of-concept PoC for...
CVE-2026-76495
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...
CVE-2026-76495
The Cisco Expressway Series software contains multiple vulnerabilities involving incorrect permission assignments (CWE-732). These issues were identified during an internal security review and are addressed in the October 2026 hardening release. The vulnerability has a High severity (CVSS 7.8) wi...
EUVD-2026-107356
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...
CVE-2026-76495 Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...
CVE-2026-76495 Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...
PT-2026-120708
Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description Incorrect permission assignments were identified within the software, which may lead to security risks. This issue is categorized under CWE-732, which refers to the use of...
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76495: Cisco Expressway Series Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...
vfs-clone-acl
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vfs-clone-acl vfs-clone-acl Class: Privilege leftover Reach: Local VFS for Git master ab95cf51 tag v2.0.26259.1 - Microsoft CloneVerb creates PrimaryEnlistmentRoot with TryCreateDirectoryAccessibleByAuthUsers. That...
Security Bulletin: IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service [CVE-2026-84414]
Summary IBM i is vulnerable to allowing a local authenticated attacker to change the ownership of certain files due to running with excessive permissions CVE-2026-84414 in Network Authentication Service NAS as described in the vulnerability details section. Vulnerability Details...
CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
GO-2026-6197 vulnerabilities
Vulnerabilities for packages: telegraf...
vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)
NodeVM builtin: '' exposes os and dns — process-wide observability reads AND writes that hijack the host sibling class of GHSA-9g8x-92q2-p28f CWE: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor chained with CWE-732 Incorrect Permission Assignment for Critical Resource and...
GHSA-M5W8-4GQ2-6F8X vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)
NodeVM builtin: '' exposes os and dns — process-wide observability reads AND writes that hijack the host sibling class of GHSA-9g8x-92q2-p28f CWE: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor chained with CWE-732 Incorrect Permission Assignment for Critical Resource and...
GO-2024-3281 vulnerabilities
Vulnerabilities for packages: rancher-agent...
GO-2024-3134 vulnerabilities
Vulnerabilities for packages: juicefs...
GO-2026-5213 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2022-0411 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner...
CVE-2026-14478
The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...