CVE-2025-27591

CVE-2025-27591 - Élévation de privilèges via below Ce dépôt contient un exploit pour CVE-2025-27591 , une vulnérabilité d'élévation de privilèges dans l'outil de surveillance Linux Below. 🛠️ Détails de la vulnérabilité CVE : CVE-2025-27591 Score CVSS : 7.8 Élevé Outil concerné : below antérieur à...

CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume

CVE-2026-5555 – /proc/self/fd 심볼릭 링크를 통한 컨테이너 탈출 개요 rshared 전파propagation로 마운트된 공유 볼륨은 악성 컨테이너가 /proc/self/fd를 통해 호스트 파일을 가리키는 심볼릭 링크를 생성할 수 있게 합니다. 볼륨에 쓰는 호스트 프로세스는 심볼릭 링크를 따라가며 중요한 호스트 파일을 덮어쓰고 컨테이너를 탈출할 수 있습니다. 취약점 세부 정보 유형: 컨테이너 탈출 / 심볼릭 링크 공격 영향: 호스트 파일 덮어쓰기, 호스트에서 루트 권한 상승. 근본 원인: 컨테이너 런타임이...

CVE-2026-55168

CVE-2026-55168 Ce dépôt contient un PoC simple pour CVE-2026-55168 dans Runtipi. Le problème est une écriture arbitraire de fichier authentifiée, accessible via le flux de restauration de sauvegarde. Une archive de sauvegarde spécialement conçue peut placer un lien symbolique dans les données...

CVE-2025-27591

Below - Escalade de privilèges locale CVE-2025-27591 Below .log pointant vers n'importe quel fichier appartenant à root, comme /etc/passwd. Lorsque below snapshot est exécuté avec sudo, il force le mode 0666 sur le fichier journal et y écrit, même s'il s'agit d'un lien symbolique. Cela permet...

cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack

A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link symlink with one of these predictable...

CVE-2025-27591

CVE-2025-27591 소개 below 버전 v0.9.0은 로컬 권한 상승 취약점에 노출되어 있습니다. 이는 프로그램이 전 세계에서 쓰기 가능한 로그 파일을 생성하기 때문이며, 공격자는 로그 파일을 시스템 중요 파일에 대한 심볼릭 링크로 교체하여 편집할 수 있고, 이를 통해 root로 로그인할 수 있습니다. 다음 취약점은 /etc/ld.so.preload를 대상으로 하여 root 권한의 리버스 셸을 획득하며, 그 전에 침해 지표를 모두 제거합니다. 이 취약점은 로그 파일 디렉토리를 생성하지 않거나 특정 권한으로 생성하는 설...

Linux Distros Unpatched Vulnerability : CVE-2026-80663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it wi...

CVE-2025-27591

CVE-2025-27591 Below v0.9.0 PoC-Exploit zur Privilegienerweiterung Haftungsausschluss Dieser Exploit ist ausschließlich für Bildungszwecke gedacht. Er wurde entwickelt, um Benutzern zu helfen, Sicherheitsschwachstellen zu verstehen und ihr Wissen über Cybersicherheit zu verbessern. Der Autor...

CVE-2025-27519

Exploit di elevazione dei privilegi di Below CVE-2025-27519 Questo repository contiene uno script Bash proof-of-concept PoC per sfruttare la vulnerabilità di elevazione dei privilegi di Below CVE-2025-27519 su sistemi Linux. L'exploit consente a un utente locale di elevare i propri privilegi a ro...

Below-Logger-Symlink-Attack_CVE-2025-27591

CVE-2025-27591 Exploit - Attacco Symlink del Logger Below Un exploit di escalation dei privilegi basato su Bash che mira allo strumento di monitoraggio delle prestazioni di sistema below. Questo exploit rinnovato sfrutta una vulnerabilità symlink nel meccanismo di logging per iniettare un utente...

SUSE CVE-2026-80663

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...

CVE-2026-80663 tools/power/x86/intel-speed-select: Harden daemon pidfile open

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...

CVE-2026-80663

CVE-2026-80663 affects the Linux kernel's tools/power/x86/intel-speed-select daemon. The vulnerability is a symlink-based pidfile clobbering flaw: the daemon uses a fixed pidfile path under /tmp and opens it without O_NOFOLLOW, allowing a local unprivileged user to pre-create a symlink at that pa...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cpio (UTSA-2026-092966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-092966 advisory. cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. Tenable has...

CVE-2026-59311

A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before the application starts. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10...

EUVD-2026-67195

A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before the application starts. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: trousers (UTSA-2026-093153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093153 advisory. An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink...

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Red Hat Automatic Bug Reporting Tool ABRT contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users...

CVE-2026-75038

CVE-2026-75038 is a local denial-of-service vulnerability in LACT (ilya-zlobintsev/LACT), affecting versions through 0.10.0 . The root cause is a predictable temporary file created in /tmp , which an attacker can exploit via a UNIX symbolic link (symlink) following attack. The CVSS 3.1 score is 6...

CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...