Lucene search
+L

245 matches found

UbuntuCve
UbuntuCve
•added 2026/07/15 12:00 p.m.•26 views

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

7.4CVSS8AI score0.00142EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•31 views

PT-2026-60534

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25 Description A heap-based buffer overflow occurs in the build inherited id function within libntfs-3g/security.c. An attacker can corrupt heap memory in the SUID-root ntfs-3g binary by creating a file within ...

8.1CVSS8AI score0.00166EPSS
SaveExploits0References56
GithubExploit
GithubExploit
•added 2026/06/28 7:50 p.m.•127 views

Exploit for Improper Ownership Management in Debian Debian_Linux

CVE-2023-0386 - OverlayFS / FUSE Original CVE source written...

7.8CVSS7.4AI score0.0788EPSS
SaveExploits17
GithubExploit
GithubExploit
•added 2026/05/30 11:44 a.m.•259 views

Exploit for CVE-2026-43494

SLEY — PinTheft PoC CVE-2026-43494 Proof o...

7.8CVSS6.8AI score0.00411EPSS
SaveExploits3
Metasploit
Metasploit
•added 2026/05/08 12:00 a.m.•360 views

xfrm-ESP Page-Cache Write via CVE-2026-43284

CVE-2026-43284 is a Linux kernel page-cache write vulnerability in the IPsec/xfrm subsystem affecting ESP Encapsulating Security Payload fragmentation. Dubbed "DirtyFrag", the bug allows a local unprivileged user to gain write access to read-only page-cache pages by triggering a race condition in...

8.8CVSS7.5AI score0.94194EPSS
SaveExploits41
GithubExploit
GithubExploit
•added 2026/05/02 6:51 p.m.•309 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy Fail CVE-2026-31431 – Exploit Usage Guide ⚠️ Discla...

7.8CVSS6.8AI score0.98114EPSS
SaveExploits250
GithubExploit
GithubExploit
•added 2026/05/01 8:04 p.m.•176 views

copyfail

Copy Fail TL;DR $ curl https://git.dc09.xyz/DarkCat09/...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/05/01 6:04 a.m.•333 views

Exploit for CVE-2026-31431

Copy Fail CVE-2026-31431 – Exploit Usage Guide ⚠️ Discla...

7.8CVSS5.5AI score0.98114EPSS
SaveExploits250
GithubExploit
GithubExploit
•added 2026/04/30 8:38 p.m.•277 views

Exploit for CVE-2026-31431

Copy Fail PoC English Python PoC for CVE-2026-31431,...

7.8CVSS5.7AI score0.98114EPSS
SaveExploits250
GithubExploit
GithubExploit
•added 2026/04/16 4:40 p.m.•394 views

ofensive-playbook

HackTheBox — Writeups Collection A collection of HackTheBox m...

9.9CVSS7.7AI score0.77836EPSS
SaveExploits35
osv_azl
osv_azl
•added 2026/04/03 10:16 p.m.•24 views

AZL-81846 CVE-2026-27456 affecting package util-linux for versions less than 2.40.2-4

util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privilege...

4.7CVSS5.2AI score0.00151EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2026/04/03 10:16 p.m.•20 views

ALPINE-CVE-2026-27456

util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privilege...

4.7CVSS5.2AI score0.00151EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2026/04/03 10:16 p.m.•31 views

UBUNTU-CVE-2026-27456

util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privilege...

4.7CVSS5.2AI score0.00151EPSS
SaveExploits1References4
CVE
CVE
•added 2026/04/03 9:23 p.m.•138 views

CVE-2026-27456

CVE-2026-27456 affects util-linux mount(8): a TOCTOU race in the SUID mount when setting up loop devices allows a local user to trick mount into opening a root-owned target by replacing the source path during the brief window between validation and open. Exploitation requires an /etc/fstab entry ...

4.7CVSS5.2AI score0.00151EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/03 9:23 p.m.•19 views

CVE-2026-27456 util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup

util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privilege...

4.7CVSS5.2AI score0.00151EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/05 1:18 a.m.•46 views

CVE-2026-29123

CVE-2026-29123 affects a SUID root-owned binary at /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux. The issue enables local privilege escalation through execution of the affected SUID binary, with attack methods including PATH hijacking, symlink abuse, or shared ...

8.6CVSS6AI score0.00133EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•8 views

CVE-2026-29123: Improper Privilege Management

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting IDC SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symli...

8.6CVSS6AI score0.00133EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2025/12/19 6:21 p.m.•226 views

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

needrestart Privilege Escalation CVE-2024-48990 This reposi...

7.8CVSS8.4AI score0.21269EPSS
SaveExploits16
EUVD
EUVD
•added 2025/10/28 9:30 p.m.•25 views

EUVD-2025-36553

Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS5.8AI score0.00342EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/28 7:15 p.m.•26 views

CVE-2025-12424

Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS0.00342EPSS
SaveExploits0References1
Rows per page
Query Builder