EUVD-2026-70470

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whether to apply its check by calling request.getRequestURL.toString.contains"/mgmt/". Tomcat returns getRequestURL un-decoded, while Spring MVC's...

MiniPlasma-Detection

MiniPlasma Detection CVE-2020-17103 Sigma detection rule for MiniPlasma, a Windows local privilege escalation exploit abusing a race condition in cldflt.sys to hijack the windir environment variable for the SYSTEM account, redirecting the WER QueueReporting scheduled task to execute an attacker...

CVE-2026-65810

A flaw was found in .NET Framework. This vulnerability, caused by a relative path traversal, allows an unauthorized local attacker to elevate their privileges. By exploiting this flaw, an attacker can gain higher access rights than intended, potentially leading to unauthorized actions on the...

CVE-2026-9854

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine...

CVE-2026-85154

WWBN AVideo contains an authentication failure vulnerability where the videoidhash credential is a non-expiring, non-revocable bearer token that grants full administrator session access to the video owner's account. Attackers who obtain a videoidhash can replay it indefinitely to authenticate as...

CVE-2026-85092

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

CVE-2026-84830

SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows authenticated administrators to execute commands with elevated privileges...

CVE-2026-76642

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

AZL-99081 CVE-2026-76642 affecting package util-linux 2.40.2-5

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

CVE-2021-43613

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...

util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks

When an external mount. helper runs but exits with a nonzero status, libmount still treats the helper invocation as successful and runs privileged post-mount hooks. A local unprivileged user with an /etc/fstab entry that uses the user option together with X-mount.idmap or X-mount.owner/group/mode...

CVE-2025-9267

CVE-2025-9267 विवरण विंडोज़ पर Seagate Toolkit में एक असुरक्षित DLL-लोडिंग भेद्यता Toolkit Installer संस्करण 2.35.0.6 से पहले में मौजूद है, जहाँ इंस्टॉलर उनकी उत्पत्ति या अखंडता को सत्यापित किए बिना वर्तमान कार्यशील निर्देशिका से DLL लोड करने का प्रयास करता है। एक हमलावर जो इंस्टॉलर निष्पादन योग्...

CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention

🔴 CVE-2026-31431 — Copy Fail Linux Kernel Local Privilege Escalation LPE — Defensive Research Repository 📖 Overview Copy Fail CVE-2026-31431 is a Local Privilege Escalation LPE vulnerability affecting the Linux kernel via controlled corruption of the page cache through the AFALG, splice and...

Fragnesia-CVE-2026-46300

🔴 Fragnesia — CVE-2026-46300 Élévation de privilèges dans le noyau Linux · CVSS 7.8 · Divulgué le 14 mai 2026 Dépôt de sensibilisation uniquement. Ce repository ne contient pas de code d'exploitation. Son objectif est d'informer les administrateurs systèmes, ingénieurs et équipes de sécurité sur ...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS 🛡️ Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers to...

CVE-2026-58641

A flaw was found in .NET. This vulnerability, caused by an integer overflow or wraparound, allows an unauthorized attacker to locally elevate their privileges. This could lead to an attacker gaining higher access rights than intended on the affected system. Mitigation No mitigation is required. R...

OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Ansible Remediation यह प्लेबुक OCI में लिनक्स इंस्टेंस पर CVE-2026-31431 जिसे Copy Fail के नाम से भी जाना जाता है को दूर करती है। CVE-2026-31431 AFALG उपयोगकर्ता स्पेस क्रिप्टो API द्वारा उपयोग किए जाने वाले Linux कर्नेल algifaead कार्यान्वयन में एक स्थानीय विशेषाधिकार वृद्धि समस्य...

CVE-2026-21007-GPU-Driver-ioctl-Race-Condition-Kernel-Memory-Mapping-

CVE-2026-21007 – حالة سباق في ioctl لبرنامج تشغيل GPU تعيين ذاكرة النواة كود البرنامج محاكاة بلغة C root@kitploit: // gpudriversim.c - Simulated GPU driver ioctl with race condition include include include include void gpummap = NULL; sizet mapsize = 0; int locked = 0; void ioctlmapsizet size //...