PwnKit-Exploit

PwnKit-Exploit CVE-2021-4034 @c0br40x help to make this section in README!! Proof of Concept debian@debian:/PwnKit-Exploit$ make cc -Wall exploit.c -o exploit debian@debian:/PwnKit-Exploit$ whoami debian debian@debian:/PwnKit-Exploit$ ./exploit Current User before execute exploit...

CVE-2026-126087

Untrusted search path in the cross-user process launcher in Open Job Description OpenJD Sessions for Python before 0.11.0, as used in the AWS Deadline Cloud worker agent before 0.33.0, on Linux might allow an authenticated remote user with permission to submit jobs to a queue to execute arbitrary...

CVE-2026-126087

Untrusted search path in the cross-user process launcher in Open Job Description OpenJD Sessions for Python before 0.11.0, as used in the AWS Deadline Cloud worker agent before 0.33.0, on Linux might allow an authenticated remote user with permission to submit jobs to a queue to execute arbitrary...

CVE-2026-126087

The AWS Deadline Cloud worker agent (versions before 0.33.0 ) is vulnerable to an untrusted search path issue in the Open Job Description (OpenJD) Sessions for Python (before 0.11.0) cross-user process launcher on Linux. An authenticated remote user with permission to submit jobs can execute arbi...

PT-2026-144412

Name of the Vulnerable Software and Affected Versions Open Job Description OpenJD Sessions for Python versions prior to 0.11.0 AWS Deadline Cloud worker agent versions prior to 0.33.0 Description An untrusted search path in the cross-user process launcher on Linux allows an authenticated remote...

CLEANSTART-2026-GH21889 If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", "

CVE-2025-47906 affects multiple packages. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ". See references for individual vulnerability details...

CLEANSTART-2026-KJ46457 If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", "

CVE-2025-47906 affects multiple packages. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ". See references for individual vulnerability details...

EUVD-2026-98087

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-75782

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-75782 IBM Aspera Enterprise Webapps Untrusted Search Path

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-75782 IBM Aspera Enterprise Webapps Untrusted Search Path

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-75782

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to an untrusted search path issue. A local attacker can exploit a misconfigured PATH environment variable to gain elevated privileges . This vulnerability is associated with CWE-426 . To remediate this issue, IBM strongly r...

PT-2026-111099

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-75782: Untrusted Search Path

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CLEANSTART-2026-NW20382 If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", "

Security vulnerability affects the cri-tools package. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", "...

CLEANSTART-2026-MQ70542 If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", "

Security vulnerability affects the buildkitd package. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", "...

PT-2026-99764

Name of the Vulnerable Software and Affected Versions Google fuse-archive versions prior to 1.24 Description An attacker can hijack the execution pathway by prepending a directory to the PATH environment variable or by writing a malicious binary to a writable directory that appears in the PATH...

CVE-2026-89325 Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

EUVD-2026-86404

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124485 advisory. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath , ., and .., can result in th...