Blackash-CVE-2025-32463

CVE-2025-32463 Escalada Local de Privilegios a Root mediante Sudo chroot en Linux 🛑 Aquí tienes un resumen de CVE-2025-32463 sin enlaces: 🔍 Resumen de la vulnerabilidad CVE-2025-32463 es una vulnerabilidad de escalada local de privilegios en Sudo versiones 1.9.14 a 1.9.17. Abusa de la opción...

CVE-2024-26475

CVE-2024-26475 Autores Sherlock Fang, Vlad Tronciu, Ayam Babu Descripción Un problema en radareorg radare2 v.0.9.7 a v.5.8.6 y corregido en v.5.8.8 permite a un atacante local causar una denegación de servicio a través de la función grubsfsreadextent. Vectores de ataque Crear un payload para que...

EUVD-2026-88668

A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-byte token can need five or six bytes. A local user who can supply such an escape to dash printf or echo %b, including through dash -c and a positional argument, can write o...

CVE-2026-102473 Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabled

A flaw was found in dash. When built without libc fnmatch, the internal pmatch matcher implements by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as .....tar.gz consume excessive CPU...

CVE-2026-102473

A vulnerability exists in dash where the internal pmatch() matcher implements the * wildcard using unbounded recursion over candidate positions when built without libc fnmatch . A local user capable of providing filenames to the matcher can trigger super-polynomial backtracking by using short mul...

EUVD-2026-88667

A flaw was found in dash. When built without libc fnmatch, the internal pmatch matcher implements by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as .....tar.gz consume excessive CPU...

CVE-2022-0847

CVE-2022-0847 描述 - CVE-2022-0847 的 PoC：Linux 内核本地权限提升漏洞。 - 由 antx 于 2022-03-08 创建。 详情 - 安全研究员 Max Kellermann 负责任地披露了“脏管道”漏洞，并声称该漏洞影响 Linux 内核 5.8 及更高版本，甚至影响 Android 设备。 - 自 5.8 版本起，Linux 内核中存在一个漏洞，允许覆盖任意只读文件中的数据。这会导致权限提升，因为非特权进程可以将代码注入到根进程中。 - 发现 Linux 内核中 copypagetoiterpipe 和 pushpipe...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Escalamiento de Privilegios con Dirty Cow CVE-2016-5195 Autor: Samuel García Academia: 4Geeks Academy Fecha: 25/06/2025 Descripción Dirty COW es una vulnerabilidad crítica del kernel Linux ≤ 4.8.3 que permite a un atacante local modificar archivos de solo lectura mediante una condición de carrera...

msi-central_privesc

CVE-2022-38532 Escalada de privilegios local en la aplicación de escritorio MSI Center. La vulnerabilidad existe en "CFeatures" de MSI.CentralServer.exe. MSI.CentralServer.exe es una aplicación que recopila información sobre tu sistema y colabora con MSI.TerminalServer.exe. La función ExecuteTask...

CVE-2023-1326

CVE-2023-1326 CVE-2023–1326 在 apport-cli 2.26.0 中的概念验证 此漏洞是 apport-cli 2.26.0 中的权限提升漏洞，类似于 CVE-2023–26604，该漏洞仅在 sudoers 中分配时才有效： 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击，类似于 CVE-2023-26604。如果系统被特殊配置允许非特权用户运行 sudo apport-cli，且 less 被配置为分页器，并且可以设置终端大小，则本地攻击者可以提升权限。 sudo /usr/bin/apport-cli -f !id...

CVE-2026-86157

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-97584

A flaw was found in the Linux kernel's AFS Andrew File System subsystem. During server lookup operations, the candidate cleanup routine incorrectly frees memory associated with an existing server's endpoint state. A local user interacting with the filesystem could exploit this issue to trigger...

CVE-2026-86158

Progress Software Fiddler Everywhere 8.0.2 contains a vulnerability due to missing authentication in its local .NET backend (Fiddler.WebUi ). A local unauthenticated attacker can exploit unauthenticated localhost HTTP and SignalR RPC channels to mint OAuth tokens and read the machine-in-the-middl...

EUVD-2026-88648

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-86157

Progress Telerik Fiddler Everywhere versions prior to 8.2.0 are vulnerable to the exposure of privileged IPC functionality . A local, low-privileged attacker who can modify application launch parameters and influence a user to start the application can replace the UI or settings with attacker-con...

CVE-2026-97578

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local user could exploit this vulnerability by submitting a specially crafted video stream with invalid tile parameters. This flaw can trigger a division-by-zero error or an out-of-bounds write to memory,...

CVE-2026-97577

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local attacker can exploit this vulnerability by submitting a specially crafted AV1 video frame that specifies more tiles than provided by userspace or supported by hardware limits. This lack of bounds...

CVE-2021-4034

CVE-2021- 在 polkit 的 pkexec 实用程序中发现了一个本地权限提升漏洞。pkexec 应用程序是一个 setuid 工具，旨在允许非特权用户根据预定义的策略以特权用户身份运行命令。当前版本的 pkexec 未能正确处理调用参数计数，最终导致将环境变量作为命令执行。攻击者可以通过精心构造环境变量来利用这一点，诱导 pkexec 执行任意代码。攻击成功执行后，可导致本地权限提升，使非特权用户获得目标机器的管理权限。 TryHackMe 链接 - tryhackme.com/jr/cve20214034...

CVE-2017-5638

CVE-2017-5638...

CVE-2026-38053---Remove-PPL

CVE-2026-38053---Remove-PPL BYOVD Remove PPL for 24H2 and 25H2 An arbitrary memory write in the handler for IOCTL 0x12C807 METHODNEITHER of Wise System Monitor v1.5.3.127 allows attackers to cause a remove PPL or Denial of Service DoS via a crafted input. Additional Information Tested on: Windows...