CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2025-50168-pwn2own-berlin-2025

Author: D4m0n CVE-2025-50168 Il s'agit d'un exploit soumis à Pwn2Own Berlin 2025 - Catégorie LPE. La vulnérabilité se produit dans Win32kbase!DirectComposition, et plus de détails sont disponibles dans l'article de blog. Remerciements Technique de contournement de kASLR : prefetch-tool par...

CVE-2026-31431-copy-fail

CVE-2026-31431 Exploit d'échec de copie Partie 1 : Concept théorique Comment fonctionne CVE-2026-31431 Au lieu que le système aille constamment chercher les fichiers directement sur le disque dur physique lent—ce qui fait perdre beaucoup de temps—le système Linux crée une copie temporaire du...

pytmipe

PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...

CVE-2026-84814

Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...

CVE-2026-84756

Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...

CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch Élévation de privilèges locale du noyau Linux LPE Vulnérabilité d'élévation de privilèges locale affectant le client CIFS/SMB du noyau Linux. 📖 Aperçu CVE-2026-46243 est une vulnérabilité d'élévation de privilèges locale LPE au sein du client CIFS/SMB du noyau Linux...

SharpSuccessor

SharpSuccessor SharpSuccessor est une preuve de concept POC .NET pour armer complètement l'attaque BadSuccessor de Yuval Gordon @YuG0rd publiée par Akamai. Un utilisateur à faibles privilèges disposant des permissions CreateChild sur n'importe quelle unité d'organisation OU du domaine Active...

CVE-2026-84814

CVE-2026-84814 affects the WordPress Bricksforge plugin in versions 3.1.8.8 and below , introducing a Subscriber Privilege Escalation vulnerability. According to the PatchStack CVSS 3.1 assessment, the vulnerability is rated CRITICAL (9.8) with a network attack vector, low complexity, no required...

CVE-2026-84814 WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...

EUVD-2026-70560

Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...

EUVD-2026-70586

Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...

CVE-2026-84756

CVE-2026-84756 is a privilege escalation vulnerability affecting the WCFM Membership WordPress plugin in versions 2.11.11 and below . The flaw allows a user with Subscriber privileges to escalate their access level. The vulnerability is rated HIGH (CVSS 3.1: 7.1) , with a network attack vector, l...

CVE-2015-5287

CVE-2015-5287 RHEL 7.0/7.1 - Élévation de privilèges locaux 'abrt/sosreport' Faire un don Aidez à maintenir ce projet Si vous trouvez ce projet utile, veuillez envisager de soutenir sa maintenance continue via PayPal ou ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក...

CVE-2026-84962

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

CVE-2026-83961

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of...

google-osconfig-privesc

Краткое описание Процесс googleosconfigagent является компонентом инструментария GoogleCloudPlatform https://github.com/GoogleCloudPlatform/osconfig, работающим по умолчанию на каждой ВМ. Агент работает от имени root и отвечает за некоторые управляемые пользователем службы, включая OS config...

nagiosxi-root-rce-exploit

nagiosxi-root-exploit 개요 Nagios XI = 5.6.5에는 공격자가 RCE를 활용하여 root로 권한을 상승시킬 수 있는 취약점이 존재합니다. 이 익스플로잇은 'nagios' 사용자로 서버에 접근할 수 있는 권한, 또는 웹 인터페이스를 통해 플러그인을 관리할 수 있는 CCM 접근 권한이 필요합니다. 세부 정보 getprofile.sh 스크립트는 시스템 프로필 다운로드profile.php?cmd=download 시 호출되며, passwordless sudo 항목을 통해 root 권한으로 실행됩니다. 이...

CVE-2026-54523

A flaw was found in Kyverno, a policy engine for cloud-native platforms. A user with specific permissions to create policy objects in one area namespace can exploit a vulnerability where a namespace argument is not properly checked. This allows them to force the system's admission controller, whi...