79789 matches found
OESA-2026-4569 flatpak security update
flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information. Security Fixes: In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data...
BIT-RCLONE-2026-116192 rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to...
BIT-RCLONE-2026-116191 Rclone before 1.75.2 Path Traversal via serve webdav MKCOL
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
BIT-OPENBAO-2026-115357 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses
OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker using these endpoints can complete root...
ArpCut
ArpCut An ARP spoofing-based LAN disconnection tool requires Root. Continuously sends forged ARP replies to LAN devices to cut off their network connections, and provides device identification, notes, whitelist, and operation records. Project Homepage Feature Overview LAN device scanning root sca...
cve-2010-3847
CVE-2010-3847 script Meant to automate the exploit discussed in http://marc.info/?l=full-disclosure&m=128776663124692&w=2. Tested on CentOS 5 x86. The DSO it outputs is compiled from the following code: include include include void attributeconstructor init setuid0; system"/bin/bash"; Usage...
ROOT-APP-PYPI-CVE-2026-23949 CVE-2026-23949 in jaraco.context - Patched by Root
Root has patched CVE-2026-23949 in the jaraco.context package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-58PV-8J8X-9VJ2 GHSA-58pv-8j8x-9vj2 in jaraco.context - Patched by Root
Root has patched GHSA-58pv-8j8x-9vj2 in the jaraco.context package for Root:PyPI. Multiple fixed versions available...
CVE-2019-2215
CVE-2019-2215 Temproot for Bravia TV via CVE-2019-2215. Overview Demonstration of a kernel memory R/W-only privilege escalation attack resulting in a temporary root shell. It works on Sony Bravia TV devices running the Android 8 PKG6.0724 firmware with kernel version 4.9.51. For this tool to work...
Exploit for CVE-2026-112445
CVE-2026-112445: The Simplest macOS Local Privilege Escalation...
Exploit for CVE-2026-98260
GhostKey — CVE-2026-98260 One-Click Privilege Escalation Tool...
Rucio Has An Authorization Bypass On REST API Endpoint For Signing URLs
Summary The "/credentials/signurl" endpoint decides authorization from the client-supplied "X-Rucio-Account" HTTP header instead of the authenticated token's account. Any client holding any valid auth token even a low-privilege account they legitimately own can send "X-Rucio-Account: root" to pas...
Exploit for CVE-2026-98260
GhostKey — CVE-2026-98260 One-Click Privilege Escalation Tool...
CVE-2026-79589
The U-speed WIFI4 N300 router (Model: T1 Pro) v1.0.0 is vulnerable to an insecure access control flaw. The vulnerability is caused by the exposure of the UART debugging interface , which lacks authentication, authorization, and access control functionality. An attacker with physical access who so...
PT-2026-132449
OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker using these endpoints can complete root...
PT-2026-132476
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
CVE-2026-33923: Nozomi Networks: A signature verification vulnerability was discovered in the update installation functionality due to inconsistent…
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...
CVE-2026-33924: Nozomi Networks: Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient…
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...
CVE-2026-61707: socfortress CoPilot: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by customeruser, the lowest-privilege portal role, are later executed by non-sandboxed Jinja2 engines when an admin o...
PT-2026-132166
Name of the Vulnerable Software and Affected Versions U-speed WIFI4 N300 router Model: T1 Pro version 1.0.0 Description An insecure access control flaw exists due to the exposure of the UART debugging interface, which lacks authentication, authorization, and access control functionality. An...