CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 ローカル権限昇格の脆弱性研究およびPoc/Exploit開発 影響を受けるシステムとアプリケーションのバージョン Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64‑based Systems Windows 10 Version 20H2 for 32‑bit Systems Windows 10 Version 20H2 for x64‑based Systems...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits 用于渗透测试人员和红队成员的一系列漏洞利用工具和文档，可辅助利用 Linux Dirty Pipe 漏洞。 关于漏洞 Dirty Pipe（CVE-2022-0847）是 Linux 内核中的一个本地提权漏洞，可能允许无权限用户执行以下操作： 修改/覆盖任意只读文件（如 /etc/passwd）。 获取提权后的 shell。 受影响版本 Linux 内核版本 5.8 及更新版本受影响。 到目前为止，该漏洞已在以下 Linux 内核版本中修复： 5.16.11 5.15.25 5.10.102...

KDE_Vuln

关于KDE vFAT漏洞的思考 1：影响范围没有我最初想象的那么大。 大多数系统可能已经更新到较新版本的KDE，或者正在运行不同的图形界面。 不过，我得查看一些实际统计数据才能得到确切数字。 获取机器的物理访问权限本身已经是一项工作，如果因为目标机器运行的是与你预期不同的图形界面而导致漏洞利用失败，那会非常令人沮丧。 2：vFAT标签的11字符限制令人沮丧。 快速浏览了Twitter、Reddit和其他论坛后，我找不到绕过这个限制的方法。 目前关于如何规避的假设是：使用fdisk将标签编辑为不同类型，同时保持文件系统为vFAT。...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits 针对渗透测试人员和红队成员的一系列漏洞利用工具及文档，用于辅助利用 Linux Dirty Pipe 漏洞。 关于漏洞 Dirty Pipe（CVE-2022-0847）是 Linux 内核中的一个本地权限提升漏洞，可能允许非特权用户执行以下操作： 修改/覆盖任意只读文件（如 /etc/passwd）。 获取高权限 shell。 受影响版本 受影响的是 Linux 内核版本 5.8 及更高版本。 目前以下 Linux 内核版本已修复该漏洞： 5.16.11 5.15.25 5.10.102...

CVE-2021-31956-EXP

Trabajando en WIN10 1903 No es una experiencia perfecta https://bbs.pediy.com/thread-271140.htm...

EUVD-2024-55738

A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, a local unprivileged user could force cupsd to authenticate against a localhost IPP service controlled by the attacker, using a reusable “Authorization: Local…”...

Astra Linux – Vulnerability in Linux 5.10

A vulnerability was discovered in the kvms390guestsidaop function within the arch/s390/kvm/kvm-s390.c file in KVM for s390 in the Linux kernel. This flaw allows a local attacker with normal user privileges to gain unauthorized memory write access. This vulnerability affects Linux kernel versions...

CVE-2026-40684 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-71131

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

kubeshark-cli-53.4.0-1.1 on GA media (moderate)

kubeshark-cli-53.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11519-1 Rating: moderate Cross-References: CVE-2026-49445 CVSS scores: CVE-2026-49445 SUSE : 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

PT-2026-76572

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.1.0 Description Files src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts generate temporary filenames using Math.random, which is not cryptographically secure and predictable across calls withi...

EUVD-2026-57623

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-72898

creationtimestamp| type| source ---|---|--- 2026-08-10 18:04:27+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117072531713464991 2026-08-10 18:04:38+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22 2026-08-10 18:56:56+00:00| seen|...

EUVD-2026-55626

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...

CVE-2026-21067

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

EUVD-2026-54977

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

EUVD-2026-54959

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...

EUVD-2026-54907

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcpservers/mermaid/index.ts of the component generatemermaidmarkdown. The manipulation of the argument folder/name leads to path traversal. The attack...

EUVD-2026-54885

A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local...