CVE-2026-91202 Cockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged paste

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory,...

CVE-2026-16898 IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...

CVE-2026-16898: External Control of File Name or Path

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...

CVE-2026-13218

A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can plant a symlink at the cache file path, causin...

CVE-2026-25710

The CVE-2026-25710 issue affects the plasmaloginauthhelper, a privileged D-Bus helper. A compromised plasmalogin service account can chown arbitrary files, enabling local privilege escalation with high impact on system confidentiality and integrity; availability is noted as high in the metrics. U...

CVE-2016-10798

cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...

EUVD-2011-0741

Malware in sbrugna...

EUVD-2009-0131

Malware in sbrugna...

EUVD-2010-1191

Malware in sbrugna...

EUVD-2015-2939

Malware in sbrugna...

EUVD-2020-27386

Malware in sbrugna...

SUSE CVE-2006-0582

Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors...

CVE-2016-10798

cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...

CVE-2016-10798

The CVE-2016-10798 entry applies to cPanel before 58.0.4, where the rearrangeacct functionality can change file ownership to the user account “nobody.” The issue is documented across multiple connected sources (Red Hat advisory, NVD entry, CNVD, PRION, CVE listings) and is tied to improper handli...

CVE-2016-10798: Concurrent Execution using Shared Resource with Improper Synchronization

cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...

PT-2019-7594

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 58.0.4 Description The issue allows for a file-ownership change to nobody via the rearrangeacct function. Recommendations For versions prior to 58.0.4, update to version 58.0.4 or later to resolve the issue...

CVE-2011-0727: Improper Link Resolution Before File Access

GNOME Display Manager gdm 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a 1 dmrc or 2 face icon file under /var/cache/gdm/...

DEBIAN-CVE-2010-1161

Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files...

CVE-2010-0439: Improper Link Resolution Before File Access

Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly change the ownership of arbitrary files via a symlink attack on an unspecified file...

Debian - Symlink In Login Arbitrary File Ownership

Debian - Symlink In Login Arbitrary File Ownership !/bin/bash - echo ' include include include include include include int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0; strcpyentry.utuser,"badguy";...