81 matches found
CVE-2017-5618-Screen-4.5.0-Root
GNU Screen 4.5.0 本地权限提升漏洞利用 CVE-2017-5618 📌 概述 针对 GNU Screen 4.5.0 的本地权限提升漏洞利用,通过劫持共享库加载并操纵 ld.so.preload 来获得 root 访问权限 。 🔧 技术细节 漏洞:CVE-2017-5618 类型:通过 ld.so.preload 进行共享库劫持 影响范围:仅限 GNU Screen 4.5.0 修复版本:GNU Screen 4.6.0+ 🎪 漏洞马戏团 CVE: 2017-5618 🎯 漏洞:Screen 4.5.0 创建具有危险权限的日志文件 技巧:我们诱骗它创建加载恶意库的...
PT-2026-6360
Neo4j Enterprise and Community editions versions prior to 2026.01.3 and 5.26.21 are vulnerable to a potential information disclosure by a user who has ability to access the local log files. The "obfuscate literals" option in the query logs does not redact error information, exposing unredacted da...
CVE-2009-4334
The Self Tuning Memory Manager STMM component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file...
EUVD-2013-0358
Malware in sbrugna...
EUVD-2011-0369
Malware in sbrugna...
EUVD-2008-3343
Malware in sbrugna...
EUVD-2012-0984
Malware in sbrugna...
EUVD-2018-6269
Malware in sbrugna...
EUVD-2006-6365
Malware in sbrugna...
EUVD-2016-1812
Malware in sbrugna...
EUVD-2009-4302
Malware in sbrugna...
EUVD-2020-30270
Malware in sbrugna...
EUVD-2012-5984
Malware in sbrugna...
EUVD-2002-1675
Malware in sbrugna...
EUVD-2015-3298
Malware in sbrugna...
EUVD-2017-9543
Malware in sbrugna...
EUVD-2022-48339
Malicious code in bioql PyPI...
EUVD-2022-51510
Malicious code in bioql PyPI...
cloud-init security update
23.4-7.0.2.el810.10 - Fixes regression in cloud-init with module ccwritefilesdeferred Orabug: 37382965 - Update IPv6 IMDS endpoint to ULA and drop NIC identifier Orabug: 35965980 - Enable IPv6 Orabug: 36502414 - Added missing services in rhel/systemd/cloud-init.service Orabug: 32183938 - Increase...
CVE-2021-1079
NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation. The attacker does not have control over the...