22 matches found
CVE-2020-0796
CVE-2020-0796 Windows SMBv3 LPE ćØćÆć¹ććć¤ć čč Daniel GarcĆa GutiĆ©rrez @danigargu Manuel Blanco ParajĆ³n @dialluvioso ćØćÆć¹ććć¤ćč§£ę SungLin Knownsec 404 Team ć«ćć POC č§£ę @ZecOps ć«ćć Writeup+PoC åčę å ± https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796...
CVE-2021-4034
CVE-2021-4034 polkit pkexec ę¬å°ęéęåę¼ę“ļ¼åÆę·»å čŖå®ä¹å½ä»¤ å·²čæē§»č³ https://github.com/signfind/CVE-2021-4034 åę¶ /bin/sh äŗ¤äŗå¼ shell éēØäŗē¹ę®ę åµäøēäøč”å½ä»¤ę§č” ęå»ŗ gcc cve-2021-4034.c -o cve RCE...
CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-
ćć®ćŖććøććŖć«ćÆ README ćććć¾ććć...
CVE-2026-57042
In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58766
A logic error in multiple functions of arm-smmu-v3.c enables a possible local escalation of privilege . This vulnerability allows for privilege elevation without requiring additional execution privileges or user interaction. Exploitation details are not provided in the documentation.
CVE-2026-58744
The software is susceptible to a local escalation of privilege due to improper input validation in multiple locations. This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. While the specific affected components or...
CVE-2026-58695
In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56992
In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56985
CVE-2026-56985 affects Google Pixel devices, specifically impacting the KeyMint component. A type confusion vulnerability in multiple files allows an attacker to obtain signatures, potentially leading to a local escalation of privilege (EoP). Exploitation does not require additional execution pri...
CVE-2026-49927
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-49887
In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28620
In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-83498
CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...
EUVD-2026-73704
Heap-based buffer overflow in Windows Online Certificate Status Protocol OCSP allows an authorized attacker to elevate privileges locally...
Wear OS Security BulletināSeptember 2026Stay organized with collectionsSave and categorize content based on your preferences.
The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage a...
CVE-2021-24664
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:09+00:00| seen| https://t.me/hackingAttack/31523 2026-09-02 01:02:35+00:00| seen| https://t.me/hackingAttack/31523 2026-09-07 05:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/31523 2026-09-08 00:00:59+00:00|...
PUB-A-511555858
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
Local privilege escalation due to DLL hijacking vulnerability
...
Uninitialized local variables
Lines of code Vulnerability details Impact Configuration -Check: uninitialized-local -Severity: Medium -Confidence: Medium -Description:.Lender.approveaddress,uint256,address.i Lender.sol87 is a local variable never initialized.A smart contract with uninitialized local variables may lead to...
ipv6-multicast-mld-list NSE Script
Uses Multicast Listener Discovery to list the multicast addresses subscribed to by IPv6 multicast listeners on the link-local scope. Addresses in the IANA IPv6 Multicast Address Space Registry have their descriptions listed. Script Arguments ipv6-multicast-mld-list.timeout timeout to wait for...