CVE-2022-38601

Suggested description Lotsia Soft Lotsia PDM PLUS v5.80.220414 was discovered to contain a buffer overflow. Vulnerability Type Buffer Overflow Vendor of Product Lotsia Soft Affected Product Code Base Lotsia PDM PLUS - 5.80.220414 Attack Type Local Impact Code execution true Impact Denial of Servi...

CVE-2026-75621

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to a security issue where a local attacker could obtain sensitive information. The root cause is the assignment of excessive permissions to a service account (CWE-250). To remediate this vulnerability, IBM strongly recommen...

CVE-2026-75621 IBM Aspera Enterprise Webapps Execution with Unnecessary Privileges

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account...

CVE-2022-0847-L-nux-PrivEsc

CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. - create by antx at 2022-03-08. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later...

CVE-2023-1326

CVE-2023-1326 A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is...

CVE-2021-4034-PwnKit-

CVE-2021-4034 PwnKit - Analysis and Exploitation This repository contains the source code to demonstrate the exploitation of the CVE-2021-4034 vulnerability, also known as PwnKit , discovered in pkexec part of the Polkit package. This flaw allows local privilege escalation to root through the use...

zygote-CVE-2024-31317

Zygote Toolkit - CVE-2024-31317 This is a toolkit that uses CVE-2024-31317 to extract private app data via ADB or spawn a shell with an app's UID. This vulnerability affects Android versions from 9 to 14 running on security patch level 2024-06-01 or lower. A support matrix of tested devices can b...

CVE-2026-104364

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation...

CVE-2023-1326

CVE-2023-1326 A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is...

EUVD-2026-97813

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation...

CVE-2026-104364

IBM Db2 (Server edition) versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 across all platforms are vulnerable to a Denial of Service (DoS) attack. The root cause is improper input validation (CWE-20), which could be exploited by a local attacker . To remediate this vulnerability, customer...

CVE-2026-104364 IBM® Db2® Denial of Service

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation...

CVE-2026-105464

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2025-27591

CVE-2025-27591 description Basically below tool allow for universal modification on its log file which lead to privilege escalation as root. details. The log file created by below is world-writable, allowing any user to modify or replace it. An attacker can exploit this by creating a symbolic lin...

CVE-2026-109243

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it di...

CVE-2026-85971 Incorrect log file permissions in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

EUVD-2026-97660

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

CVE-2026-109358

Edgeless Systems Contrast versions 1.8.0 before 1.24.1 are vulnerable to a privilege escalation flaw due to an incorrect permissions assignment (CWE-732 ). The node installer creates the containerd config with world-writable permissions (0666 ), allowing local unprivileged users to modify the con...

CVE-2026-109358 Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...