871 matches found
Enlogic SCADA System ENTTEK Code Execution
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...
Vulnerable-Docker-Engine
CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...
CVE-2026-77873
An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges...
CVE-2026-119238
A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local application to perform unauthorized touch gestures...
EUVD-2026-123577
A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local application to perform unauthorized touch gestures...
CVE-2026-119238
A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local application to perform unauthorized touch gestures...
CVE-2026-119238
A potential improper permissions vulnerability was identified in Lenovo XiangBangbang . This flaw could allow a local application to perform unauthorized touch gestures . The vulnerability is associated with CWE-926 (Improper Export of Android Application Components). No specific exploit details ...
CVE-2026-77873
An improper permissions vulnerability exists in Lenovo System Update . This flaw could allow a local authenticated user to execute code with elevated privileges . The vulnerability is associated with CWE-276: Incorrect Default Permissions . No specific remediation steps or exploit details are pro...
EUVD-2026-123574
An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges...
CVE-2026-77873
An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges...
CVE-2026-119238: Lenovo XiangBangbang Application: A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local…
A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local application to perform unauthorized touch gestures...
CVE-2026-77873: Lenovo System Update: An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user…
An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges...
PT-2026-145262
A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local application to perform unauthorized touch gestures...
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
EUVD-2026-94697
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
CVE-2026-87660
A vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) due to improper file permissions and missing authorization . An unprivileged local user can exploit this to invoke privileged hardware tests , force system er...
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
CVE-2026-87660: Incorrect Permission Assignment for Critical Resource
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
PT-2026-107803
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
Adm-zip Privilege Escalation
The vulnerability of the extractAllTo and extractEntryTo functions in the Node.js library for working with zip files, Adm-zip, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to increase their privileges...