EUVD-2026-98482

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109704

A privilege escalation vulnerability exists in the Application Update component of Mozilla products. This flaw was addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . No specific technical root cause or exploit details are provided in the documents, but the vu...

CVE-2026-109704 Privilege escalation in the Application Update component

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109704 Privilege escalation in the Application Update component

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109704

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-41651

CVE-2026-41651 CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 Local privilege escalation via TOCTOU race condition in PackageKit's D-Bus transaction handler. Any unprivileged local user can install arbitrary packages as root ...

CVE-2026-90052

A flaw was found in the Linux kernel's dm-integrity component. This vulnerability arises from an incorrect checksum calculation during the discard operation, specifically when the tag size is smaller than the digest size. This can lead to a buffer overflow, where data is written beyond the...

CVE-2026-47101-PoC

CVE-2026-47101 — LiteLLM Privilege Escalation via /key/generate + /user/update LiteLLM v1.82.6 before v1.83.14 /key/generate endpoint allows low-privileged internaluser to request an API key with wildcard routes "/", and then elevate their own role to proxyadmin via the /user/update endpoint,...

CVE-2026-43284

Dirty Frag — kernel page-cache write tracking site Source for the Dirty Frag patch-status tracker: a single-page site recording which distributions have shipped a fix for the paired page-cache write privilege-escalation chain in the Linux kernel. Where the facts live Everything about the bug — CV...

CVE-2026-31635-DirtyDecrypt

CVE-2026-31635 · DirtyDecrypt Linux local privilege escalation in the RxRPC/GSSAPI decryption path. A missing skbcowdata check in rxgkdecryptskb allows an unprivileged local attacker to corrupt page cache pages and overwrite in-memory contents of read-only files. Contents Overview Quick Start...

RLSA-2026:80498 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

Security Bulletin: Vulnerabilities in the kernel and libssh affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in libssh and the kernel affect IBM Storage Virtualize products and could cause denial of service and privilege escalation impacts. CVE-2025-5987 CVE-2025-39966 CVE-2025-40176 Vulnerability Details CVEID:CVE-2025-5987 DESCRIPTION: A flaw was found in libssh when using the...

RLSA-2026:80497 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

packetfence-CVE-2024-39024

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - Low level authenticated user to admin RCE CVE: CVE-2024-3924 Timeline: Discovered - ly1g3 Reported - ly1g3...

RLSA-2026:80687 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Privilege-Escalation-using-the-Dirty-Cow-Kernel-Exploit This project aims to practically demonstrate the operation of the Dirty COW exploit CVE-2016-5195, a critical vulnerability in the Linux kernel. It simulates a realistic scenario in which an attacker with limited local access to an unpatched...

Security Bulletin: Multiple vulnerabilities in the Linux kernel and expat affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in the kernel and expat components affect IBM Storage Virtualize products and could cause denial of service and privilege escalation impacts. CVE-2026-43284 CVE-2023-53373 CVE-2025-59375 Vulnerability Details CVEID:CVE-2026-43284 DESCRIPTION: In the Linux kernel, the...

CVE-2026-31431-Copy-Fail---Minified-LPE-PoC

CVE-2026-31431-CopyFail---Minified-LPE-PoC ⚠️ Disclaimer For Educational and Authorized Security Testing Purposes Only. This Proof-of-Concept PoC was synthesized for authorized Red Team emulation and vulnerability auditing. The authors and contributors assume no liability for the misuse of this...

-Detection-and-Mitigation-for-CVE-2022-1679

-Detection-and-Mitigation-for-CVE-2022-1679 Description The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages...

CVE-2019-2215

CVE-2019-2215 Exploit for the Bad Binder vulnerability in Android written by @wired0ut. It abuses the UAF in order to leak taskstruct, then overwrites addrlimit and escalates privileges by overwriting the id block in cred. The full flow of the research and exploitation can be found here series of...