CVE-2025-14018

CVE-2025-14018: NetBT e-Fatura 권한 상승 취약점 📋 일반 정보 매개변수| 값 ---|--- CVE ID| CVE-2025-14018 취약점 유형| 로컬 권한 상승 따옴표 없는 서비스 경로, Unquoted Service Path CWE| CWE-428 영향받는 제품| NetBT e-Fatura 취약한 버전| sc qc InboxProcessor SC QueryServiceConfig SUCCESS SERVICENAME: InboxProcessor TYPE : 10 WIN32OWNPROCESS...

sudo-chroot

설명: 1.9.17p1 이전 버전의 Sudo는 --chroot 옵션과 함께 사용자가 제어하는 디렉터리의 /etc/nsswitch.conf를 사용하므로, 로컬 사용자가 루트 액세스 권한을 얻을 수 있습니다. Sudo 로컬 권한 상승 --chroot...

CVE-2022-3294

익스플로잇 참조: https://github.com/kubernetes/kubernetes/issues/113757 https://github.com/kubernetes/kubernetes/issues/119640 https://github.com/kubernetes/sig-security/blob/main/sig-security-external-audit/security-audit-2021-2022/findings/Kubernetes%20v1.24%20Final%20Report.pdf 열거: 1. 마스터 노드의 IP를...

CVE-2026-92073

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Enterprise Policies component...

CVE-2026-92062

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Session Restore component...

CVE-2026-92053

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Graphics: CanvasWebGL component...

CVE-2026-92052

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component...

CVE-2026-88904

The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on one of its REST routes, which tests the caller against a capability taken from the request itself, allowing any authenticated user, including subscribers, to add, modify and delete arbitrary blog options and thereby...

CVE-2026-85128

The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowing unauthenticated users to request any role, including administrator, and to be granted it once the request is approved...

CVE-2026-46300

보안 연구 및 법적 고지 이 저장소는 교육 및 승인된 보안 연구 목적으로만 사용됩니다. 허용된 사용 통제된 환경로컬 VM, 격리된 랩에서 보안 취약점 및 익스플로잇 개념 이해 샌드박스 격리 메커니즘 및 한계 연구 안전한 소프트웨어 설계 및 방어적 보안 관행 학습 시스템 소유자의 명시적 서면 동의를 받은 공인된 침투 테스트 금지된 사용 모든 시스템, 네트워크 또는 데이터에 대한 무단 공격, 익스플로잇 또는 접근 멀웨어, 랜섬웨어 또는 악성 도구 개발 또는 배포 모든 불법 또는 비윤리적인 보안 활동 법적 고지 귀하는 모든 관련 법...

CVE-2026-92043

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Audio/Video component...

microcode_ctl security, bug fix, and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

EUVD-2026-81348

The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on one of its REST routes, which tests the caller against a capability taken from the request itself, allowing any authenticated user, including subscribers, to add, modify and delete arbitrary blog options and thereby...

CVE-2026-88904 PuppyFW <= 0.4.4 - Subscriber+ Arbitrary Blog Options Update and Deletion Leading to Privilege Escalation

The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on one of its REST routes, which tests the caller against a capability taken from the request itself, allowing any authenticated user, including subscribers, to add, modify and delete arbitrary blog options and thereby...

CVE-2026-88904

The PuppyFW WordPress plugin through 0.4.4 has a broken authorization flaw in one of its REST routes: the plugin validates the caller against a capability value taken from the request itself rather than a server-side trusted source. This allows any authenticated user , including low-privilege sub...

CVE-2026-85128 Choose User Role at Registration for WooCommerce < 1.3.3 - Unauthenticated Privilege Escalation via Registration Role Request

The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowing unauthenticated users to request any role, including administrator, and to be granted it once the request is approved...

EUVD-2026-81336

The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowing unauthenticated users to request any role, including administrator, and to be granted it once the request is approved...

CVE-2026-85128

The Choose User Role at Registration WordPress plugin (for WooCommerce) before 1.3.3 fails to validate the role requested at registration against the roles an administrator chose to offer. This allows unauthenticated users to request any role—including administrator —and be granted it once the re...

CVE-2026-92047

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Crash Reporting component...

CVE-2025-32463_exploit

CVE-2025-32463 — sudo "chwoot" chroot 로컬 권한 상승 --chroot-R 옵션을 통한 sudo의 로컬 권한 상승으로 root 권한을 획득합니다. sudoers 항목이 전혀 없는 계정예: www-data을 포함한 모든 로컬 사용자 에게 유효합니다. sudo 1.9.14 – 1.9.17 은 sudoers 정책이 아직 평가되는 동안 — 즉, 인증 결정 이전에 — 사용자가 제공한 디렉터리로 chroot합니다. 해당 chroot 이후 sudo의 NSS 조회는 공격자의 chroot 내부에서...