Astra Linux – Vulnerability in xorg-server

A vulnerability was discovered in X.Org. This security flaw arises because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges escalation on systems where the X server is running with privileged access, and may...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the virtio-fs shared file system daemon virtiofsd of QEMU. The new ‘xattrmap’ option may cause the ‘security.capability’ xattr in the guest to not be dropped when writing files, potentially allowing a modified, privileged executable to be executed within the guest. In rar...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A array indexing vulnerability was discovered in the netfilter subsystem of the Linux kernel. The absence of a certain macro could lead to an incorrect calculation of the offset of the h-nets array, giving attackers the ability to arbitrarily increment/decrement a memory buffer beyond its bounds...

Astra Linux – Vulnerability in multipath-tools

Multipath-tools versions 0.7.7 through 0.9.x, prior to 0.9.2, allowed local users to obtain root access. This vulnerability was exploited in conjunction with CVE-2022-41974. Local users who had access to /dev/shm could modify symlinks within multipathd due to incorrect symlink handling. This coul...

Astra Linux – Vulnerability in firejail

A privilege context switching issue was discovered in the join.c file of Firejail 0.9.68. By creating a fake Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment where the Linux user namespace remains the initial user...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allowed execution with unnecessary privileges. The -oP option is available to the exim user, and it could lead to a denial of service, as files owned by root could be overwritten...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop a new packet when sch-limit == 0. Expected behavior: If the scheduler’s limit is reached, pfifotailenqueue will drop a packet from the scheduler’s queue and decrease the scheduler’s qlen by one. Then, it wi...

Astra Linux – Vulnerability in Linux

A issue was discovered in Linux: improper handling of VMIO|VMPFNMAP vmas in KVM can bypass RO checks and cause pages to be freed while still accessible by the VMM and guest. This allows users who have the ability to start and control a VM to read/write random pages of memory, potentially leading ...

Astra Linux – Vulnerability in cifs-utils

It was discovered that cifs-utils’ mount.cifs function invoked a shell when requesting the Samba password, which could be exploited to inject arbitrary commands. An attacker who had special permissions, such as those through sudo rules, could use this vulnerability to escalate their privileges...

Astra Linux – Vulnerability in haveged

In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged. However, while it detects that the connecting user is not root cred.uid != 0 and prepares a negative acknowledgment ASCIINAK, it fails to stop execution. The code proceed...

CVE-2025-2304

كامليون سي إم إس v2.9.1 - أداة استغلال لتسليط الامتيازات عبر التعيين الجماعي - برهان المفهوم الوصف هذا المشروع هو أداة برهان مفهوم استغلال مبنية على بايثون توضح وتحلل ثغرة تسليط امتيازات تؤثر على إصدار v2.9.1 من كامليون سي إم إس. يقوم السكريبت بأتمتة عملية المصادقة على مثيل مستهدف، واسترجاع معلوم...

USN-8867-1 ceph vulnerability

It was discovered that the Ceph Object Gateway RGW SigV4 handler did not reject requests carrying x-amz- headers that were absent from the signed header set. An attacker holding a presigned URL could possibly use this issue to attach arbitrary unsigned x-amz- headers that RGW would honor, allowin...

USN-8867-1: Ceph vulnerability

It was discovered that the Ceph Object Gateway RGW SigV4 handler did not reject requests carrying x-amz- headers that were absent from the signed header set. An attacker holding a presigned URL could possibly use this issue to attach arbitrary unsigned x-amz- headers that RGW would honor, allowin...

CVE-2025-27591

CVE-2025-27591 استغلال تصعيد الامتيازات لـ Below v0.9.0 إخلاء مسؤولية هذا الاستغلال مخصص للأغراض التعليمية فقط. صُمم لمساعدة المستخدمين على فهم الثغرات الأمنية وتحسين معرفتهم بالأمن السيبراني. لا يقرّ المؤلف بأي أنشطة غير قانونية أو وصول غير مصرح به إلى الأنظمة. استخدم هذه المعلومات بمسؤولية وفي...

WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Peter Tang in WordPress Plugin SMS Alert Order Notifications versions = 4.0.0...

-CVE-2021-4034

تقرير استغلال CVE-2021-4034 PwnKit ملخص التقييم الأمني الرسمي أدلة استغلال مُتحكم بها لـ CVE-2021-4034 مع توثيق التأثير وإرشادات المعالجة. بيانات التقرير الوصفية الحقل| القيمة ---|--- معرف CVE| CVE-2021-4034 اسم الثغرة| PwnKit المكون المتأثر| pkexec polkit النوع| تصعيد الصلاحيات المحلي الخطورة|...

cve-2026-0828

CVE-2026-0828 — برهان المفهوم PoC لثغرة BYOVD في برنامج تشغيل Safetica ProcessMonitorDriver.sys برنامج تشغيل النواة Safetica DLP ProcessMonitorDriver.sys يعرض IOCTL غير مصادق عليه يسمح لأي مستدعي في وضع المستخدم بإنهاء عمليات عشوائية عبر ZwTerminateProcess في سياق النواة، متجاوزًا حماية PPL...

Security Bulletin: Kernel privilege escalation and disclosure Vulnerabilities in Linux in IBM Cloud Pak System[CVE-2026-46300, CVE-2026-46333, CVE-2026-43284]

Summary Multiple vulnerabilities in the Linux kernel affect the underlying operating system used by Platform system Manager PSM and OS Image for Red Hat Enterprise Linux Systems shipped with Cloud Pak System, . These issues include a local privilege escalation flaw in the networking subsystem...

kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM module, specifically within the Secure Virtual Machine SVM component. The sevdbgcrypt function, when handling encryption, incorrectly calculates the transfer length, leading to a page overflow. This memory corruption can resu...