1249 matches found
CVE-2022-31594
A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system...
Design/Logic Flaw
A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system...
CVE-2022-31594
A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system...
CVE-2022-31594
CVE-2022-31594 corresponds to an elevation-of-privilege issue in SAP Adaptive Server Enterprise (ASE) affecting local Unix systems. The Red Hat/CNVD/CNNVD entries describe a scenario where a highly privileged user can exploit a SUID-root program to escalate to root. The root cause is cited as an ...
Zyxel Firewall SUID Binary Privilege Escalation
This module exploits CVE-2022-30526, a local privilege escalation vulnerability that allows a low privileged user e.g. nobody escalate to root. The issue stems from a suid binary that allows all users to copy files as root. This module overwrites the firewall's crontab to execute an attacker...
EulerOS 2.0 SP3 : hesiod (EulerOS-SA-2022-1729)
According to the versions of the hesiod package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment...
CVE-2022-29849
In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system...
Privilege escalation
In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system...
Progress OpenEdge权限许可和访问控制问题漏洞
Progress OpenEdge is an application. A privilege-granting and access-control issue vulnerability exists in Progress OpenEdge versions prior to 11.7.14 and versions 12.x through 12.2.9, which stems from the vulnerability to privilege escalation of certain SUID binaries in the OpenEdge application....
CVE-2022-29849
CVE-2022-29849 affects Progress OpenEdge; vulnerable in OpenEdge versions before 11.7.14 and 12.x before 12.2.9 due to privilege-escalation risk from certain SUID binaries. Local attackers could elevate privileges on the affected system. Remediation: upgrade to OpenEdge 11.7.14 or later, or 12.2....
CVE-2022-29849
In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system...
CVE-2021-34591
In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid applications socat, ip udhcpc and ifplugd...
Bender ebee 充电控制器 安全漏洞
The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from an easy local privilege escalation. An authenticated attacker can gain root access via the suid application socat, ip udhcpc, and ifplugd. The following products and...
Exploit for Improper Initialization in Linux Linux_Kernel
Linux Privilege Escalation Bash script to check and exploit th...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 One day for the polkit privilege escalation expl...
io_uring Same Type Object Reuse Priv Esc
This module exploits a bug in iouring leading to an additional putcred that can be exploited to hijack credentials of other processes. We spawn SUID programs to get the free'd cred object reallocated by a privileged process and abuse them to create a SUID root binary ourselves that'll pop a shell...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847...