CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-더티파이프-익스플로잇 침투 테스터 및 레드 팀원을 위한 익스플로잇 및 문서 모음으로, Linux Dirty Pipe 취약점 악용을 지원하는 데 사용할 수 있습니다. 취약점 정보 Dirty Pipe CVE-2022-0847는 Linux 커널의 로컬 권한 상승 취약점으로, 권한이 없는 사용자가 다음과 같은 작업을 수행할 수 있습니다: /etc/passwd와 같은 임의의 읽기 전용 파일 수정/덮어쓰기. 상승된 셸 획득. 영향을 받는 버전 5.8보다 최신인 Linux 커널 버전이 영향을 받습니다. 현재까지 다...

CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 ローカル権限昇格の脆弱性研究およびPoc/Exploit開発 影響を受けるシステムとアプリケーションのバージョン Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64‑based Systems Windows 10 Version 20H2 for 32‑bit Systems Windows 10 Version 20H2 for x64‑based Systems...

KDE_Vuln

KDE vFAT 취약점에 대한 생각. 1: 범위는 처음 생각했던 것만큼 크지 않습니다. 대부분의 시스템은 최신 버전의 KDE로 업데이트되었거나 다른 GUI를 사용하고 있을 것입니다. 정확한 숫자를 얻으려면 실제 통계를 살펴봐야겠지만요. 기기에 물리적 접근을 하는 것 자체가 이미 큰 일인데, 대상 머신이 예상과 다른 GUI를 실행 중이라는 이유만으로 익스플로잇이 작동하지 않는다면 꽤나 골치 아플 것입니다. 2: vFAT 레이블의 11자 제한이 답답합니다. 트위터, 레딧, 기타 포럼을 잠시 살펴본 후에도 이를 우회할 방법을 찾을 ...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-더티파이-익스플로잇 침투 테스터와 레드 팀을 위한 익스플로잇 및 문서 모음으로, Linux Dirty Pipe 취약점 악용을 지원하는 데 사용할 수 있습니다. 취약점 정보 Dirty Pipe CVE-2022-0847는 Linux 커널의 로컬 권한 상승 취약점으로, 권한이 없는 사용자가 다음과 같은 작업을 수행할 수 있습니다: /etc/passwd와 같은 임의의 읽기 전용 파일을 수정/덮어쓰기. 상승된 셸 획득. 영향을 받는 버전 5.8보다 최신인 Linux 커널 버전이 영향을 받습니다. 현재까지 다음...

CVE-2021-31956-EXP

WIN10 1903에서 작업 중 — 완벽한 경험은 아님 https://bbs.pediy.com/thread-271140.htm...

CentOS Linux 7 [TuxCare] Security Update: aide (CENTOS7:CLSA-2026:1784559120)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1784559120 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CVE-2026-83293

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: FNDN. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligen...

Astra Linux – Vulnerability in Linux 5.10

A vulnerability was discovered in the kvms390guestsidaop function within the arch/s390/kvm/kvm-s390.c file in KVM for s390 in the Linux kernel. This flaw allows a local attacker with normal user privileges to gain unauthorized memory write access. This vulnerability affects Linux kernel versions...

kernel-devel-7.2.3-1.1 on GA media (moderate)

kernel-devel-7.2.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11703-1 Rating: moderate Cross-References: CVE-2026-80724 CVSS scores: CVE-2026-80724 SUSE : 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVE-2026-80724 SUSE : 4.8...

Oracle Linux 8 : ELSA-2026-62420-0: / gegl04 (ELSA-2026-624200)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-624200 advisory. 0.4.4-7.1 - Fix CVE-2026-18300 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

EUVD-2024-55738

A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation...

CVE-2026-40684 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-71131

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

kubeshark-cli-53.4.0-1.1 on GA media (moderate)

kubeshark-cli-53.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11519-1 Rating: moderate Cross-References: CVE-2026-49445 CVSS scores: CVE-2026-49445 SUSE : 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

PT-2026-76572

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.1.0 Description Files src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts generate temporary filenames using Math.random, which is not cryptographically secure and predictable across calls withi...

EUVD-2026-57623

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-72898

creationtimestamp| type| source ---|---|--- 2026-08-10 18:04:27+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117072531713464991 2026-08-10 18:04:38+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22 2026-08-10 18:56:56+00:00| seen|...

EUVD-2026-55626

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...

CVE-2026-21067

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

EUVD-2026-54977

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...