217987 matches found
CVE-2026-85390
Checkmate through 3.11.0 omits the isAllowed role guard middleware on its maintenance-window, notification, and check-deletion routes, allowing users with a read-only role to perform administrative actions. A low-privileged attacker with a valid user-role session can create arbitrary maintenance ...
CVE-2020-29669
Macally WIFISD2-2A82 Analyse de CVE-2020-29669 par Maximilian Barz Silky et Daniel Schwendner code-byter ========================== Ce document décrit l'exploitation du routeur de voyage Macally WIFISD2-2A82 version du firmware : 2.000.010. L'utilisateur Guest peut réinitialiser son propre mot de...
CVE-2026-78593
Kibana 's Cribl integration contains an insufficiently validated configuration field that allows an authenticated user with Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template. This results in an Elasticsearch ingest pipeline being writt...
CVE-2026-78593 Improper Control of Generation of Code in Kibana Leading to Privilege Escalation
An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond th...
CVE-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation
Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...
EUVD-2026-70657
Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...
CVE-2026-78583
CVE-2026-78583 is an Incorrect Authorization (CWE-863) vulnerability in Kibana 's Elastic Fleet feature. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents . An attacker holding Fl...
EUVD-2026-66331
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication XPC while masquerading as an Apple-signed process...
CVE-2026-15431 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...
CVE-2026-15431
HP Support Assistant versions prior to 9.53.2.0 contain a local privilege escalation vulnerability caused by insufficient access controls , allowing a local attacker with low privileges (and no user interaction) to compromise the confidentiality, integrity, and availability of the vulnerable syst...
EUVD-2026-70656
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...
ipfire-2-25-auth-rce
Ipfire 2-25 core update 156 RCE authentifié le système exécute une commande lors de l'installation de n'importe quel paquet le système récupère 7zip à partir d'un simple html et vérifiez le répertoire tmp version 2.25 - core update 156 ipfire permet d'exécuter des commandes système arbitraires en...
CVE-2024-6624
CVE-2024-6624 | JSON API User = 3.9.3 - تصعيد الامتيازات بدون مصادقة هذا نص برمجي بلغة Python يستغل الثغرة الأمنية CVE-2024-6624 في إضافة JSON API User = 3.9.3 الخاصة بـ WordPress. تتيح هذه الأداة للمهاجمين غير الموثقين تسجيل مستخدمين جدد ورفع صلاحياتهم إلى مستوى المسؤول Administrator دون إذن...
EUVD-2026-70652
Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...
CVE-2026-85028
CVE-2026-85028 affects the FPGA management tool installation component of AWS FPGA Development Kit (aws-fpga) prior to version 2.3.4 . The root cause is the creation of a temporary file in a world-writable directory with insecure permissions. A local attacker with low privileges can place crafted...
CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...
CVE-2025-50168-pwn2own-berlin-2025
Author: D4m0n CVE-2025-50168 Il s'agit d'un exploit soumis à Pwn2Own Berlin 2025 - Catégorie LPE. La vulnérabilité se produit dans Win32kbase!DirectComposition, et plus de détails sont disponibles dans l'article de blog. Remerciements Technique de contournement de kASLR : prefetch-tool par...
CVE-2026-31431-copy-fail
CVE-2026-31431 Exploit d'échec de copie Partie 1 : Concept théorique Comment fonctionne CVE-2026-31431 Au lieu que le système aille constamment chercher les fichiers directement sur le disque dur physique lent—ce qui fait perdre beaucoup de temps—le système Linux crée une copie temporaire du...
pytmipe
PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...
