util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks

When an external mount. helper runs but exits with a nonzero status, libmount still treats the helper invocation as successful and runs privileged post-mount hooks. A local unprivileged user with an /etc/fstab entry that uses the user option together with X-mount.idmap or X-mount.owner/group/mode...

CVE-2025-9267

CVE-2025-9267 विवरण विंडोज़ पर Seagate Toolkit में एक असुरक्षित DLL-लोडिंग भेद्यता Toolkit Installer संस्करण 2.35.0.6 से पहले में मौजूद है, जहाँ इंस्टॉलर उनकी उत्पत्ति या अखंडता को सत्यापित किए बिना वर्तमान कार्यशील निर्देशिका से DLL लोड करने का प्रयास करता है। एक हमलावर जो इंस्टॉलर निष्पादन योग्...

CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention

🔴 CVE-2026-31431 — Copy Fail Linux Kernel Local Privilege Escalation LPE — Defensive Research Repository 📖 Overview Copy Fail CVE-2026-31431 is a Local Privilege Escalation LPE vulnerability affecting the Linux kernel via controlled corruption of the page cache through the AFALG, splice and...

Fragnesia-CVE-2026-46300

🔴 Fragnesia — CVE-2026-46300 Élévation de privilèges dans le noyau Linux · CVSS 7.8 · Divulgué le 14 mai 2026 Dépôt de sensibilisation uniquement. Ce repository ne contient pas de code d'exploitation. Son objectif est d'informer les administrateurs systèmes, ingénieurs et équipes de sécurité sur ...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS 🛡️ Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers to...

CVE-2026-58641

A flaw was found in .NET. This vulnerability, caused by an integer overflow or wraparound, allows an unauthorized attacker to locally elevate their privileges. This could lead to an attacker gaining higher access rights than intended on the affected system. Mitigation No mitigation is required. R...

OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Ansible Remediation यह प्लेबुक OCI में लिनक्स इंस्टेंस पर CVE-2026-31431 जिसे Copy Fail के नाम से भी जाना जाता है को दूर करती है। CVE-2026-31431 AFALG उपयोगकर्ता स्पेस क्रिप्टो API द्वारा उपयोग किए जाने वाले Linux कर्नेल algifaead कार्यान्वयन में एक स्थानीय विशेषाधिकार वृद्धि समस्य...

CVE-2026-21007-GPU-Driver-ioctl-Race-Condition-Kernel-Memory-Mapping-

CVE-2026-21007 – حالة سباق في ioctl لبرنامج تشغيل GPU تعيين ذاكرة النواة كود البرنامج محاكاة بلغة C root@kitploit: // gpudriversim.c - Simulated GPU driver ioctl with race condition include include include include void gpummap = NULL; sizet mapsize = 0; int locked = 0; void ioctlmapsizet size //...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense This playbook outlines detection, containment, and remediation strategies for CVE-2025-55234, a critical Windows SMB privilege escalation flaw. By Mark Mallia Introduction In today’s constantly shifting cyber-risk landscape, the ability to pivot fro...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 Mitigation Toolkit Defensive remediation, auditing, and verification toolkit for CVE-2026-54420 affecting LiteSpeed cPanel Plugin in shared hosting environments using CloudLinux / CageFS. ⚠️ Security Notice This repository is intended for system administrators, hosting providers, an...

ForgottenButNotGone

Forgotten but Not Gone This repository contains proof-of-concept scripts for the vulnerabilities presented at the talk "Forgotten but Not Gone: Unauthenticated RCEs and LPEs in Legacy Linux Services" from Black Hat USA 2026 and DEF CON 34. CVE-2026-28372 Local privilege escalation in TelnetD:...

SonicWall NSM On-Prem Affected By Multiple Vulnerabilities

1 CVE-2026-78327 - Authenticated Command Injection Vulnerability An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin...

CVE-2026-85174 SiYuan before v3.8.2 API Token Exposure via Log File

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers can read the log file via the getFile endpoint to recover admin API tokens and gain permanent administrative access...

CVE-2026-85174 SiYuan before v3.8.2 API Token Exposure via Log File

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers can read the log file via the getFile endpoint to recover admin API tokens and gain permanent administrative access...

CVE-2019-1388-Privilege-Escalation--2021-

CVE-2019-1388 Privilege Escalation CVE-2019-1388 Lab Analysis: Documented local privilege escalation via Windows UAC certificate dialogs on Windows 7. CVE-2019-1388: Windows UAC Privilege Escalation Lab An educational cybersecurity lab and technical analysis documenting CVE-2019-1388 —a local...

CVE-2026-76642

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

EUVD-2026-70382

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

CVE-2026-76642

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

CVE-2026-76642

util-linux (libmount component) versions through 2.41.5 and 2.42.2 fail to check the exit status of an external mount helper before executing privileged post-mount hooks. A local unprivileged user with an /etc/fstab entry using the user option combined with X-mount.idmap or X-mount.owner/group/mo...