CVE-2025-33190

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or escalation of privileges...

The vulnerability of the elf_swap_shdr() function in the GNU Binutils development environment, related to buffer overflow in the heap, allows an attacker to increase their privileges within the system.

The vulnerability of the elfswapshdr function in the GNU Binutils development environment is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

EulerOS 2.0 SP13 : pam (EulerOS-SA-2025-2273)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevat...

EUVD-2024-54966

Malicious code in bioql PyPI...

CVE-2025-1131 Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation

A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...

CVE-2024-44893

The vulnerability CVE-2024-44893 affects JimuReport v1.7.8, specifically the component path /jeecg-boot/jmreport/dict/list. A crafted GET request can allow an attacker to escalate privileges. The CVE is rated CVSSv3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, no user interaction requi...

kernel: use-after-free in sch_qfq network scheduler

A use-after-free flaw was found in qfqdequeue and aggdequeue in net/sched/schqfq.c in the Traffic Control QoS subsystem in the Linux kernel. This issue may allow a local user to crash the system or escalate their privileges on the system...

SUSE CVE-2024-22017

setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...

AIX : Multiple Vulnerabilities (IJ48784)

The version of AIX installed on the remote host is prior to APAR IJ48784. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ48784 advisory. - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command to...

RHEL 8 : kernel-rt (RHSA-2023:7548)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7548 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

The vulnerability of the hci_conn_hash_flush() function in the net/bluetooth/hci_conn.c module of the Linux operating system allows a malicious actor to gain increased privileges.

The vulnerability of the hciconnhashflush function in the net/bluetooth/hciconn.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the io_commit_cring() function in the io_uring/io_uring.c module of the io_uring subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or to enhance their privileges.

The vulnerability of the iocommitcrying function in the iouring/iouring.c module of the iouring subsystem of the Linux operating system is related to a violation of synchronization mechanisms. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

systemd 246 - Local Privilege Escalation

Exploit Title: systemd 246 - Local Privilege Escalation Exploit Author: Iyaad Luqman K init6 Application: systemd 246 Tested on: Ubuntu 22.04 CVE: CVE-2023-26604 systemd 246 was discovered to contain Privilege Escalation vulnerability, when the systemctl status command can be run as root user. Th...

OESA-2023-1438 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A time-of-check to time-of-use issue exists in iouring subsystem's IORINGOPCLOSE operation in the Linux kernel's versions 5.6 - 5.11 inclusive, which allows a local user to elevate their privileges to root. Introduced in...

SUSE CVE-2016-2856

ptchown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubuntu 12.04 LTS and before 2.19-0ubuntu6.8 on Ubuntu 14.04 LTS; and the glibc package before 2.21-0ubuntu4.2 on Ubuntu 15.10 and before 2.23-0ubuntu1 on Ubuntu 16.04 LTS and 16.10...

Privilege Escalation

apacheairflow is vulnerable to Privilege Escalation. The vulnerability is due to the File Task Handler failing to apply different permissions to logs generated by airflow. To address impersonation, the File Task Handler should grant varied permissions to log files generated by Airflow. The...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

Debian: Security Advisory (DSA-5149-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...