CVE-2026-34990-poc

CVE-2026-34990 — PoC de impresora local de CUPS Solo para pruebas autorizadas / uso de investigación. Ejecute este PoC únicamente contra sistemas que posea o para los que tenga autorización explícita de prueba. Este repositorio contiene una reproducción orientada al CUPS del sistema de la...

CVE-2026-34990-poc

CVE-2026-34990: PoC de escalada de privilegios local en CUPS 2.4.16 Una adaptación a Python3 de la divulgación original de CUPS y el PoC que se ejecuta como un usuario local ordinario contra un servicio CUPS existente. Demuestra un token Authorization: Local filtrado y una condición de carrera qu...

CVE-2026-34990

CVE-2026-34990 — escalada de privilegios local en CUPS cups2root, sin arnés CVSS 3.x : 8.4 HIGH aprox. — verificar CWE : CWE-287 Autenticación incorrecta + CWE-269 Gestión incorrecta de privilegios Fix : CUPS 2.4.17+ Afecta : CUPS ≤ 2.4.16 con cupsd ejecutándose como root y 631 accesible localmen...

CVE-2026-34990-poc

CVE-2026-34990 Escalada de privilegios local en CUPS 2.4.16 mediante escritura arbitraria de archivos a través de CUPSCREATELOCALPRINTER. Vulnerabilidad CUPS permite crear impresoras locales con un device-uri establecido a una ruta file://. Enviar un trabajo de impresión con document-format:...

CVE-2026-34990

CVE-2026-34990 - Escalada de privilegios local en CUPS Escalada de privilegios local contra CUPS = 2.4.16 ejecutándose como root. Filtra el token de autenticación Local de cupsd y luego escribe un fragmento de sudoers NOPASSWD como root mediante una cola de impresión file://. Uso python3 poc.py S...

CVE-2026-43503

CVE-2026-43503 DirtyClone - 概念验证 - SecurewithUmer DirtyClone 的概念验证 — 一种 Linux 内核本地权限提升漏洞。 此仓库包含一个有效的概念验证 ，该验证允许非特权本地用户通过利用通过克隆套接字缓冲区导致的页缓存损坏来获取 root 权限。 关于 DirtyClone DirtyClone CVE-2026-43503 是 Dirty 家族的第四个成员（DirtyPipe → DirtyFrag → DirtyClone）。 它滥用了在使用带有 ESP-in-UDP 的 TEE netfilter 目标时...

Important: Red Hat Security Advisory: rsync security, bug fix, and enhancement update

An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

rsync: rsync: Local Privilege Escalation via Symlink Following

A symlink-following vulnerability in rsync allows local attackers to redirect predictable output paths to arbitrary filesystem locations. When rsync runs with elevated privileges such as setuid or a privileged daemon, this enables arbitrary file overwrites and local privilege escalation...

CVE-2026-102146

An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controlled content to arbitrary locations accessible to the Email Protection Gateway service account. This exceeds the administrator's intended privileges and could ...

CVE-2026-102129

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges...

CVE-2026-102132

An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system...

CVE-2026-102122

Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...

CVE-2026-102120

A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to run operating system commands with elevated privileges on another node of the same cluster. Insufficient input validation in ...

CVE-2026-102126

A stored cross-site scripting XSS weakness in Kiteworks Core could allow an administrator holding only a single, narrowly scoped delegated permission to store crafted content that later executes arbitrary JavaScript in the authenticated session of a System Administrator who views the affected pag...

CVE-2026-102118

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...

CVE-2026-102113

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root. A privileged routine did not safely handle a filesystem path that the lower-privileged account could...

CVE-2026-102112

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to...

CVE-2026-102108

An authenticated administrator of Kiteworks Email Protection Gateway could submit a crafted serialized object to a cluster management interface that was deserialized without sufficient validation, potentially allowing arbitrary code execution in the context of the gateway service account...

CVE-2026-102093

Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full...

CVE-2026-12793

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-12793 CVE-2026-12793 JetFormBuilder — Dynamic Blocks Form Builder 3.6.2 — jetmonsters The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including,...