Review.CVE-2021-3156

👑 CVE-2021-3156 Baron Samedit — Escalada de Privilegios mediante Desbordamiento de Heap en sudo 📅 Fecha: 2025-06-08 ✍️ Autor: @TopskiyPavelQwertyGang 🧠 Investigador de Seguridad | Entusiasta del Red Team 🧠 Resumen del CVE CVE-ID: CVE-2021-3156 Tipo: Desbordamiento de Búfer basado en Heap...

RefluxFS_CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Escalada local de privilegios del kernel de Linux LPE 📖 Descripción general CVE-2026-64600 «RefluxFS» es una vulnerabilidad del kernel de Linux que afecta a la implementación del sistema de archivos RefluxFS. El fallo se origina en una validación incorrecta de los...

CVE-2024-36424

CVE-2024-36424 This vulnerability was discovered and disclosed by M. Akil Gündoğan from Secunnix Vulnerability Research Team. This repository will hold the proof-of concept and advisories. Details: Product: K7 Ultimate Security Affected versions: v17.0.2019 CVE ID: CVE-2024-36424 Operating System...

secpub

Cisco Nexus OS NX-OS - Problemas de "inyección" de comandos / saneamiento. Descubierto por: Peter Adkins [email protected] Acceso: Local; se requiere acceso autenticado. Seguimiento e identificadores: CVE - CVE-2011-2569 Sistemas operativos afectados: Cisco Nexus OS NX-OS Participación del...

CVE-2026-41651

🚨 CVE-2026-41651 — Pack2TheRoot Vulnerabilidad de escalada de privilegios en PackageKit condición de carrera TOCTOU 📌 Descripción general CVE-2026-41651 es una vulnerabilidad de escalada de privilegios local que afecta al servicio del sistema PackageKit utilizado en varias distribuciones de Linux...

CVE-2019-13272

CVE-2019-13272 - Pkexec Escalada local de privilegios ⚠️ Solo para fines educativos y de investigación de seguridad autorizada Autores originales del exploit Muy agradecidos al autor original del PoC BCOLES Descripción En el kernel de Linux anterior a 5.1.17, ptracelink en kernel/ptrace.c maneja...

mailorder

Mail Order El Servicio de Licencias de Nalpeiron NLSSRV32.exe se instala como parte de ciertas instalaciones de software para gestionar operaciones privilegiadas de licencias de software. Está emparejado con un componente cliente filechck.dll que se comunica con el servicio a través de mailslots ...

aziot-cctv-cve-2025-50777

aziot-cctv-cve-2025-50777 CVE-2025-50777: Root Access and Plaintext Credential Exposure in AZIOT Smart CCTV Summary A local access control vulnerability CVE-2025-50777 has been identified in the firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera Firmware Version V1.00.02. Thi...

CVE-2020-1048

CVE-2020-1048 Existe una vulnerabilidad de elevación de privilegios cuando el servicio Windows Print Spooler permite indebidamente la escritura arbitraria en el sistema de archivos. Un atacante que explotara con éxito esta vulnerabilidad podría ejecutar código arbitrario con privilegios elevados...

CVE-2026-77875

Hide Photos – Secure vault (version 4.1.0 ) stores vault media and wallet records in shared external storage , where the data is not bound to the application's calculator-style passcode authentication boundary. A local actor with access to shared external storage—such as through an authorized non...

CVE-2023-43352-CMSmadesimple-SSTI--Content

CMSmadesimple SSTI v2.2.18 Author: Sergio Description: Server Side Template Injection SSTI vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to use native template syntax to inject a malicious payload into a template, which is then executed server-side. Attack Vectors: A SSTI...

MAL-002

MAL-002: Forzar el reinicio del sistema mediante MSIs de Windows instalados Una vez que un software se instala correctamente en el sistema, uno o más archivos MSI de confianza aparecerán en la carpeta “C:\Windows\Installer” y pueden permitir a un usuario de bajo privilegio realizar acciones de...

CVE-2026-56795

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-56795

Dell Server Update Utility versions prior to 26.07.01 are affected by an Uncontrolled Search Path Element vulnerability. A low-privileged attacker with local access could exploit this to achieve code execution , with a CVSS 3.1 score of 8.2 (HIGH) and a changed scope impacting confidentiality, in...

CVE-2026-56795

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

EUVD-2026-81691

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-80356

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-80356

Dell OpenManage Server Administrator (OMSA) , versions prior to 11.1.0.3 , is affected by an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low-privileged attacker with local access can exploit this flaw to expose sensitive information. The vulnerability is rated CVSS...

EUVD-2026-81666

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-81441

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...