kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

CVE-2021-4034-UniontechOS

CVE-2021-4034-UniontechOS 说明 统信UOS 桌面操作系统，存在CVE-2021-4034漏洞（Linux Polkit本地权限提升漏洞）。...

CVE-2024-36587

CVE-2024-36587 - dnscrypt-proxy Local Privilege Escalation Overview Vulnerability Description : When installing the dnscrypt-proxy service, it trusts and registers executables in the current directory, allowing privilege escalation by inserting a malicious binary. Affected Versions : dnscrypt-pro...

CVE-2026-0092

CVE-2026-0092 在包管理器中，由于缺少权限检查，可能存在设备锁控制器绕过的问题。这可能导致本地权限提升，且无需额外的执行权限。利用该漏洞无需用户交互。 NVD - CVE-2026-0092 Android 安全公告 - Android 17...

0xsp-Mongoose

Support the project for continuous development ETH 0xf340c15c5e669a4ababab856e9f2bccd659d6e42 0xsp Mongoose RED for Windows Current Release 2.2.0 0xsp mongoose red version is provided to assist your needs during cyber security simulation, by using this version you will be able to audit a targeted...

EUVD-2026-70795

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-70794

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-70792

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...

EUVD-2026-70793

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-70798

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-70797

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

CVE-2026-67397

Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root...

CVE-2020-9332

CVE-2020-9332 Description A vulnerable bus driver in FabulaTech “USB for Remote Desktop” and “USB over Network” allows low privileged users to add a fully controlled software USB device, which could be used by an attacker to elevate privileges under certain common circumstances Vulnerability Type...

CVE-2019-16098

CVE-2019-16098 The driver in Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information...

CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC

CVE-2024-32019 Netdata ndsudo Privilege Escalation PoC Summary CVE-2024-32019 is a local privilege-escalation flaw in Netdata’s SUID helper ndsudo that lets a local user execute arbitrary programs as root via an untrusted search path PATH hijacking. The issue exists because ndsudo restricts comma...

CVE-2017-5618-Screen-4.5.0-Root

GNU Screen 4.5.0 本地权限提升漏洞利用 CVE-2017-5618 📌 概述 针对 GNU Screen 4.5.0 的本地权限提升漏洞利用，通过劫持共享库加载并操纵 ld.so.preload 来获得 root 访问权限 。 🔧 技术细节 漏洞：CVE-2017-5618 类型：通过 ld.so.preload 进行共享库劫持 影响范围：仅限 GNU Screen 4.5.0 修复版本：GNU Screen 4.6.0+ 🎪 漏洞马戏团 CVE: 2017-5618 🎯 漏洞：Screen 4.5.0 创建具有危险权限的日志文件 技巧：我们诱骗它创建加载恶意库的...

EUVD-2026-71743

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

EUVD-2026-71442

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component...

PT-2026-86231

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description An unauthenticated physical memory disclosure exists in the DirectIo64.sys driver...

PT-2026-86225

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description An improper access control issue exists in the DirectIo64.sys kernel driver. The...