CVE-2025-32463

Платформа обнаружения CVE-2025-32463 Комплексная платформа мониторинга безопасности и обнаружения, предназначенная для выявления попыток эксплуатации уязвимости повышения привилегий sudo chroot CVE-2025-32463. Этот проект демонстрирует передовые методологии обнаружения угроз, возможности...

MagiskEoP

Введение Это эксплойт для уязвимости CVE-2024-48336 в приложении Magisk, который позволяет локальному приложению незаметно получить root-доступ без согласия пользователя. Уязвимость была первоначально сообщена @vvb2060 и PoC выполнено @canyie. Она исправлена в Canary 27007. Демонстрационное видео...

CVE-2025-32463-PoC

CVE-2025-32463 – Повышение привилегий через sudo chroot 📝 Обзор CVE-2025-32463 — это локальная уязвимость повышения привилегий, затрагивающая утилиту sudo. Она позволяет обычному пользователю повысить привилегии до root, эксплуатируя опцию -R которая задаёт пользовательский корневой каталог време...

CVE-2021-3560

Уязвимость Polkit - CVE-2021-3560 📕 Введение В 2021 году исследователь Кевин Бэкхаус обнаружил уязвимость повышения привилегий в утилите polkit. однако не все версии Linux уязвимы для polkit. Ниже приведен пример уязвимой версии; Red Hat Enterprise Linux 8 Fedora 21 или новее Debian Testing...

CVE-2015-1328

CVE-2015-1328 概念実証 CVE-2015-1328 の概念実証 PoC エクスプロイトです。この脆弱性は、Linux カーネルの overlayfs 実装に影響を与える権限昇格の脆弱性です。この脆弱性により、ローカルの非特権ユーザーが、ユーザーネームスペース内の overlayfs マウント操作における不適切なパーミッションチェックを悪用して、root アクセスを取得できます。 概要 CVE-2015-1328 は、overlayfs サポートとユーザーネームスペースが有効な Linux...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Повышение привилегий с использованием эксплойта Dirty Cow для ядра Этот проект имеет целью продемонстрировать на практике работу эксплойта Dirty COW CVE-2016-5195, критической уязвимости в ядре Linux. Моделируется реалистичный сценарий, в котором атакующий с ограниченным локальным доступом к...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pcp (UTSA-2026-093145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093145 advisory. A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise Hi...

EUVD-2026-54262

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock for POCO M6 Pro emerald GhostLock CVE-2026-43499...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2724)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871...

EulerOS Virtualization 2.10.0 : dnsmasq (EulerOS-SA-2026-2848)

According to the versions of the dnsmasq package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary...

CVE-2026-47134 ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. The ECDSA private key used to sign the on-disk policy database /Library/Application Support/clearancekit/store.db is stored in the macOS System Keychain. The key was created via the two-step patte...

EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2026-2645)

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root...

TencentOS Server 4: cifs-utils (TSSA-2026:0552)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0552 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Amazon Linux 2 : dnsmasq, --advisory ALAS2-2026-3318 (ALAS-2026-3318)

The version of dnsmasq installed on the remote host is prior to 2.76-16. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3318 advisory. A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute...

Important: dnsmasq

Issue Overview: A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. CVE-2026-4892 An information disclosure vulnerability in dnsmasq allows remote attackers to...

New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption

Details have emerged about a new variant of the recent Dirty Frag Linux local privilege escalation LPE vulnerability that allows local attackers to gain root access, making it the third such bug to be identified in the kernel within a span of two weeks. Codenamed Fragnesia , the security...

PT-2026-48611

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description A local privilege escalation issue exists in FreeBSD kTLS-RX. The flaw allows a local user to overwrite files they have read access to by utilizing in-place AES-GCM decryption over sendfile2...

CVE-2026-4892

A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet...

Security Advisory 0136

Security Advisory 0136 PDF Date: May 1, 2026 Revision | Date | Changes ---|---|--- 1.0 | May 1, 2026 | Initial release 1.1 | May 7, 2026 | Additional required configuration for exploitation information added 1.2 | May 11, 2026 | Advisory updated with additional mitigations. The CVE-ID tracking th...