CVE-2026-44787: Improper Privilege Management

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the signup flow could allow newly registered users to set primarygroupid and gain whisper-group privileges without legitimate group membership on sites with whispersallowedgroups configured. This...

CVE-2022-50927

Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricte...

CVE-2022-50927 Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation

Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricte...

CVE-1999-0094

AIX piodmgrsu command allows local users to gain additional group privileges...

EUVD-2015-0291

Malware in sbrugna...

EUVD-2014-3059

Malware in sbrugna...

EUVD-2011-1499

Malware in sbrugna...

EUVD-2016-3940

Malware in sbrugna...

EUVD-2012-1216

Malware in sbrugna...

EUVD-2011-4854

Malware in sbrugna...

EUVD-2011-2511

Malware in sbrugna...

EUVD-2003-0819

Malware in sbrugna...

EUVD-2003-1034

Malware in sbrugna...

EUVD-2004-0158

Malware in sbrugna...

EUVD-1999-0094

Malware in sbrugna...

EUVD-2017-14652

Malware in sbrugna...

EUVD-2025-4182

Malicious code in bioql PyPI...

CVE-2024-52869

Certain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, mismanages groups. Specifically, when there is an operating system move from SUSE Enterprise Linux Server SLES 12 Service Pack SP 2 or 3 to SLES 15 SP2 on Teradata Database systems, some...

UBUNTU-CVE-2025-2242

An improper access control vulnerability in GitLab CE/EE affecting all versions from 17.4 prior to 17.8.6, 17.9 prior to 17.9.3, and 17.10 prior to 17.10.1 allows a user who was an instance admin before but has since been downgraded to a regular user to continue to maintain elevated privileges to...

Linux Distros Unpatched Vulnerability : CVE-2017-5551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The simplesetacl function in fs/posixacl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which...