287661 matches found
OPENSUSE-SU-2026:21832-1 Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl bsc1268867. Changes for acl: - Update to 2.4.0 jscPED-16501: Major Issues Fixed: - The libacl library...
CVE-2024-28000
CVE-2024-28000 - PoC de Escalada de Privilegios en LiteSpeed Cache !WARNING Este repositorio está destinado únicamente a fines educativos y de investigación. Utilice el PoC proporcionado exclusivamente en sistemas de su propiedad o para los que tenga permiso explícito de probar. El acceso no...
CVE-2026-36980-Kernel-BSOD-DoS-PoC
CVE-2026-36980-Kernel-BSOD-DoS-PoC Fecha del proyecto: feb 2026 / Se descubrió una vulnerabilidad de desbordamiento de búfer en el manejador de IOCTL del controlador de kernel pwdrvio.sys. La vulnerabilidad permite que un atacante local sin privilegios corrompa la memoria del pool del kernel,...
CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
DEBIAN-CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
cve-2026-31431
CVE-2026-31431 — Copy Fail: Linux内核LPE研究实验室 仅用于教育目的。未经明确授权，请勿在系统上使用。 目录 漏洞描述 受影响组件 工作原理 实验室设置 Docker PoC — 演示 缓解措施 参考文献 漏洞描述 字段| 值 ---|--- CVE| CVE-2026-31431 别名| Copy Fail CVSS| 7.8 高 类型| 本地权限提升 LPE 受影响内核| 2017 – 2026 commit 72548b093ee3 及之后 上游修复| commit a664bf3d603d 2017年的回退 披露日期| 2026年4月29日...
EUVD-2026-76061
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the YPTWallet plugin where user-supplied CryptoWallet values are base64-encoded but not HTML-escaped before storage in walletlog.information. Administrators viewing pending...
CVE-2024-22120-RCE-with-gopher
Uso root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Escenario de ejemplo Has identificado un servidor Zabbix ejecutándose en la IP 192.168.1.100, y tienes acceso a un usuario con pocos privilegios con los siguientes detalles: ID de sesión sid:...
CVE-2026-82329-poc
Herramienta de Evaluación de Seguridad CVE-2026-82329 para Artifactory PoC y herramienta de validación para identificar instalaciones de JFrog Artifactory self-hosted afectadas por CVE-2026-82329. Esta herramienta valida la siguiente cadena de autenticación: 1. Crea un JWT HS256 de join utilizand...
NextJS-RCE-Root-Takeover
🚨 你知道如何通过 Next.js 16.0.6 获得 RCE 然后通过 python3 进行 权限提升 吗？🚨 让我从一个来自 TryHackMe "Love at First Breach 2026" 竞赛（高级赛道）的 真实实验室 教你…… 📄 完整报告在此： 🔥 内容：CVE-2025-55182 → Shell PoC → 权限提升 → Root + 修复 渗透测试人员： [email protected]...
CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
CVE-2026-77159 Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
EUVD-2026-76034
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
CVE-2026-47839
A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitelist configuration. The issue occurs specifically when an OIDC identity provider uses groupMappingMode: ASSCOPES with ...
Fsociety-CVE-2024-0670-CheckMK-LPE
🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - Acceso Poderoso al Sistema Hecho Simple 📦 Resumen Hola amigo. Esta herramienta desbloquea acceso avanzado para CheckMK CVE-2024-0670. Aprovecha un manejo débil de archivos para obtener soporte de SYSTEM. El software incluye una función especializada de...
CVE-2026-47839
Cloud Foundry UAA and cf-deployment are vulnerable to a privilege-escalation flaw in federated OIDC authentication. When an OIDC identity provider is configured with groupMappingMode: AS_SCOPES and a wildcard externalGroupsWhitelist entry, users can obtain the uaa.admin scope despite operators in...
CVE-2026-47839 Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin
A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitelist configuration. The issue occurs specifically when an OIDC identity provider uses groupMappingMode: ASSCOPES with ...
EUVD-2026-76026
A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitelist configuration. The issue occurs specifically when an OIDC identity provider uses groupMappingMode: ASSCOPES with ...
CVE-2020-24030
CVE-2020-24030 Descripción ForLogic Qualiex v1 y v3 tiene una expiración de token débil. Esto permite la escalada de privilegios remota no autenticada y el acceso a datos sensibles mediante la reutilización de tokens. Fechas importantes Anuncio al proveedor: 2020-07-12 Fecha de divulgación públic...