281419 matches found
CVE-2026-67397
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root...
CVE-2020-9332
CVE-2020-9332 Descripción Un controlador de bus vulnerable en FabulaTech "USB para Escritorio Remoto" y "USB a través de la Red" permite a usuarios con pocos privilegios agregar un dispositivo USB de software completamente controlado, lo que podría ser utilizado por un atacante para elevar...
CVE-2019-16098
CVE-2019-16098 El controlador en Micro-Star MSI Afterburner 4.6.2.15658 también conocido como RTCore64.sys y RTCore32.sys permite que cualquier usuario autenticado lea y escriba en memoria arbitraria, puertos de E/S y MSRs. Esto puede ser explotado para escalada de privilegios, ejecución de códig...
CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC
CVE-2024-32019 Netdata ndsudo Privilege Escalation PoC Summary CVE-2024-32019 is a local privilege-escalation flaw in Netdata’s SUID helper ndsudo that lets a local user execute arbitrary programs as root via an untrusted search path PATH hijacking. The issue exists because ndsudo restricts comma...
CVE-2017-5618-Screen-4.5.0-Root
GNU Screen 4.5.0 Local Privilege Escalation Exploit CVE-2017-5618 📌 Overview Local privilege escalation exploit for GNU Screen 4.5.0 that hijacks shared library loading to gain root access via ld.so.preload manipulation. 🔧 Technical Details Vulnerability: CVE-2017-5618 Type: Shared Library...
EUVD-2026-71743
An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...
EUVD-2026-71442
An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component...
PT-2026-86231
Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description An unauthenticated physical memory disclosure exists in the DirectIo64.sys driver...
PT-2026-86225
Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description An improper access control issue exists in the DirectIo64.sys kernel driver. The...
PT-2026-86248
An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...
PT-2026-86229
Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description A privilege escalation issue exists in the DirectIo64.sys driver. Local users can...
CVE-2026-75171
HubCore v.14.1.1 is affected by a privilege escalation vulnerability in its HUBCOREID session cookie handling component , which allows a remote attacker to escalate privileges. No CVSS metrics, patch version, or confirmed exploitation details have been published in the provided documents. The vul...
CVE-2026-71625
ThinkSNS+ v.2.4 (slimkit plus) contains a privilege escalation vulnerability in the ResetPasswordController.php component. A remote attacker can exploit this to escalate privileges, with the referenced advisory further describing the mechanism as account takeover via an expired verification code ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106209)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106209 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server:...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106165)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106165 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106191)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106191 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server:...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106184)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106184 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...
CVE-2026-75160
CVE-2026-75160 is a critical remote privilege escalation vulnerability in MBS Solutions X-Serie Gateway running Firmware V6_00_05 . The vulnerability is exploitable via the web endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi, allowing a remote, unauthenticated attacker to escalate priv...
