pack2theroot-lab

Pack2TheRoot Lab — CVE-2026-41651 Un laboratorio de escalada de privilegios local estilo CTF, dockerizado y construido en torno al aviso Pack2TheRoot CVE-2026-41651, una vulnerabilidad de 12 años en el demonio PackageKit divulgada por el Red Team de Deutsche Telekom el 22 de abril de 2026. El...

EUVD-2026-20964

Tmds.DBus provides .NET libraries for working with D-Bus from .NET. Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by...

EUVD-2011-2516

Malware in sbrugna...

EUVD-2005-0202

Malware in sbrugna...

EUVD-2010-4321

Malware in sbrugna...

EUVD-2011-1840

Malware in sbrugna...

EUVD-2009-1189

Malware in sbrugna...

EUVD-2007-3362

Malware in sbrugna...

EUVD-2006-6090

Malware in sbrugna...

EUVD-2018-4520

Malware in sbrugna...

EUVD-2022-45111

Malicious code in bioql PyPI...

EUVD-2022-45335

Malicious code in bioql PyPI...

EUVD-2022-45112

Malicious code in bioql PyPI...

EUVD-2022-53060

Malicious code in bioql PyPI...

EUVD-2022-45110

Malicious code in bioql PyPI...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF005 (September 2025)

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF005. Vulnerability Details CVEID:CVE-2025-30204 DESCRIPTION: golang-jwt is a Go implementation of JSON Web Tokens...

CVE-2016-15045

Local privilege escalation in Deepin’s lastore-daemon (versions 0.9.53-1 to 0.9.66-1) arises from a D-Bus misconfiguration that allows users in the sudo group to invoke InstallPackage without password authentication. With shell access, an attacker can craft a .deb containing a malicious post-inst...

TencentOS Server 3: dbus (TSSA-2023:0171)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0171 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2022-28655

isclosingsession allows users to create arbitrary tcp dbus connections...

CVE-2018-16262

The pkgmgr system service in Tizen allows an unprivileged process to perform package management actions, due to improper D-Bus security policy configurations. Such actions include installing, decrypting, and killing other packages. This affects Tizen before 5.0 M1, and Tizen-based firmwares...