CVE-2026-49060-Lab

CVE-2026-49060 - Aplicación Móvil Hippoo para WooCommerce Asignación Incorrecta de Privilegios / Escalada de Privilegios Resumen Ejecutivo Este repositorio contiene un laboratorio Docker local para reproducir y validar CVE-2026-49060, una vulnerabilidad de Asignación Incorrecta de Privilegios que...

CVE-2023-2640-3262-PoC

CVE-2023-2640/3262-PoC Pruebas de concepto mínimas para vulnerabilidades de escalada de privilegios locales en Ubuntu OverlayFS. CVEs CVE-2023-2640 – Problema de manejo de permisos en OverlayFS CVE-2023-3262 – Problema de escalada de capacidades en OverlayFS Archivos CVE-2023-2640.sh – Prueba...

ROS-20260923-73-0084

The vulnerability of the completeemulatedio function in the Linux operating system is related to errors in permission handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-26629

Bypass de Pantalla de Bloqueo CVE-2022-26629 Productos Afectados SoroushPlus+ Messenger 1.0.30 Tipo de Vulnerabilidad Control de Acceso Inadecuado Impacto Bypass de Pantalla de Bloqueo Resumen El manejo inadecuado de permisos y privilegios insuficientes permite a un atacante modificar y...

ROS-20260921-73-0111

The vulnerability of the vfsworm module in Samba software is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability allows a remote attacker to modify arbitrary files...

EUVD-2026-81674

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-1759

Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above...

PT-2026-91925

Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above...

Astra Linux – Vulnerability in Samba

A flaw was discovered in the way samba handled file and directory permissions. A authenticated user could exploit this flaw to gain access to certain file and directory information that would otherwise be unavailable to the attacker...

CVE-2026-69907

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

EUVD-2026-73616

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

CVE-2026-69907

CVE-2026-69907 affects Windows Enterprise App Management , where improper handling of insufficient permissions or privileges allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity , low privileges r...

Windows Enterprise App Management Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

PT-2026-87780

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

CVE-2026-86420

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...

CVE-2026-79783

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid...

EUVD-2026-53546

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, requests to open external protocol URLs from web content did not take iframe sandbox restrictions into account, so a sandboxed iframe could...

CVE-2026-70612

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, requests to open external protocol URLs from web content did not take iframe sandbox restrictions into account, so a sandboxed iframe could...

CVE-2026-11804

Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise...

PT-2026-57271

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.6.0 Description In the IT asset and license management system, the update function within UsersController incorrectly handles missing permission request fields when processed through NormalizePermissionsPayloadActi...