EvilAhenk

CVE-2026-6508 EvilAhenkは、LiderAhenk統合管理システムアーキテクチャにおいて、エージェント間のすべてのクライアントが互いに'root'権限でコードを実行できるようにする（許可されていないRCEおよび横方向の移動）重大なセキュリティ脆弱性です。 システムの仕組み LiderAhenkでは、管理パネル/中央サーバーがXMPPを介してクライアントにタスクとポリシーメッセージを送信します。 中央管理パネルは、権限のあるユーザーでXMPPサーバーに接続します。 クライアント上のahenkエージェントも同じXMPP基盤に接続します。...

CVE-2024-6387-analysis

CVE-2024-6387 OpenSSH シグナル競合脆弱性分析 脆弱性概要 CVE-2024-6387 は、OpenSSH 8.5p1 から 9.7p1 までのバージョンに存在するシグナル処理競合条件の脆弱性で、「regreSSHion」 と呼ばれています。攻撃者は 6～8 時間以内に継続的に試行することで、root 権限で任意のコードを実行できる可能性があり、世界中の約 1400 万台のサーバーに影響を与えます。 影響バージョン OpenSSH 8.5p1 ～ 9.7p1（Ubuntu 22.04 のデフォルトバージョン 8.9p1 が影響を受けます 脆弱性の原理 1. OpenS...

CVE-2025-32463

CVE-2025-32463 是一个影响特定版本 sudo 的本地权限提升漏洞。该漏洞滥用 sudo -R chroot 功能，结合 Linux 名称服务开关（NSS）机制，强制 sudo 以 root 身份加载攻击者控制的共享库。通过在被构造的 chroot 环境中操纵 nsswitch.conf，攻击者可以以 root 权限执行任意代码并生成一个 root shell。 chwoot.sh 演示了该漏洞的工作原理。它创建一个伪造的根文件系统，注入一个恶意的 NSS 模块，并触发易受攻击的 sudo 行为，通过共享库加载和构造函数执行来实现权限提升。...

CVE-2026-44402

CVE-2026-44402 — Voltronic Power SNMP Web Pro 1.1 未认证远程代码执行 -red.svg 严重未认证远程代码执行漏洞（CVSS 9.8）— Voltronic Power SNMP Web Pro 1.1 该工具利用 CVE-2026-44402 ，这是 Voltronic Power SNMP Web Pro 1.1 设备中的一个漏洞，允许未认证攻击者 通过 upload.cgi 端点上传恶意固件压缩包，并以 root 权限执行系统命令。 ⚠️ 漏洞概述 属性| 值 ---|--- CVE ID| CVE-2026-44402 CVSS...

CVE-2017-16524

CVE-2017-16524 発見者 Omar Mezrag - 0xFFFFFF 影響を受ける製品 Samsung ネットワークビデオレコーダー - Web Viewer 1.0.0.193 Samsung SRN-1670D 上 製品のベンダー Hanwha / Samsung Security - https://www.hanwhasecurity.com/ 脆弱性の種類 無制限ファイルアップロード脆弱性 攻撃ベクトル AccessVector AV: Network User Interaction UI: None Authentication Au: Requires...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

CVE-2026-91839

A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters in VPN connection profile credentials. A local unprivileged user can exploit this by crafting a malicious VPN profile...

CVE-2026-96812

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

CVE-2026-96812

A vulnerability in Google gVisor on Linux platforms (prior to commit 573a9e73cf844f) allows a local attacker with container image deployment privileges to achieve root code execution on the host system. The issue stems from an improper exposure of resource in the host file helper (gofer ) when CU...

CVE-2026-96812 Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

EUVD-2026-87111

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

CVE-2026-91839: Improper Neutralization of CRLF Sequences

A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters in VPN connection profile credentials. A local unprivileged user can exploit this by crafting a malicious VPN profile...

CVE-2026-83603

Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socketpath from the low-privileged netdata service account. The account can direct root fail2ban-client...

CVE-2026-95511

Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups lpadmin, which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed...

CVE-2026-95511

...

EUVD-2026-84335

Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups lpadmin, which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed...

CVE-2026-95511

This CVE ID is rejected and does not represent an active vulnerability entry.

CVE-2026-95511

A privilege escalation vulnerability was found in CUPS when used with the cups-filters serial backend. A local user who is a member of the lpadmin group can configure a printer that uses a privileged serial backend. The CUPS scheduler does not restrict the path component of non-file device URIs, ...

PT-2026-96687

Name of the Vulnerable Software and Affected Versions CUPS and cups-filters affected versions not specified Description A privilege escalation issue exists in CUPS when used with the cups-filters serial backend. A local user with lpadmin group membership can configure a printer using a privileged...

CVE-2026-79920

Ajenti is a Linux & BSD modular server admin panel. Prior to version 2.2.16, any authenticated user can call /api/core/tasks/start to enqueue InstallPlugin, UnInstallPlugin, or UpgradeAll from plugins/plugins/tasks.py without plugin-management authorization. InstallPlugin and UnInstallPlugin...