CVE-2026-41651

🚨 CVE-2026-41651 — Pack2TheRoot PackageKit 中的权限提升漏洞（TOCTOU 竞态条件） 📌 概述 CVE-2026-41651 是一个影响多种 Linux 发行版中 PackageKit 系统服务的本地权限提升漏洞。 该漏洞由 检查时间到使用时间（TOCTOU）竞态条件 引起，可被滥用以操纵软件包安装流程并将权限提升至 root。 ⚠️ 影响 若成功利用，该漏洞可能允许本地非特权用户： 获得 root 级权限 执行 任意软件包安装脚本（RPM scriptlets） 修改系统级配置 破坏系统完整性与机密性 🧠 注意：该漏洞需要本地访问...

SNEK_Equinox

SNEK Equinox 我要感谢 Nightmare-Eclipse 从项目 UnDefend 中获得的灵感（非个人层面）—— https://web.archive.org/web/20260521145157/https://github.com/Nightmare-Eclipse/UnDefend: 有趣的是，我找到了一种方法，可以向 EDR 的 Web 控制台谎报 Defender 正在运行且已更新至最新版本，即使实际上并非如此。我曾考虑发布代码，但仔细想想，这会造成太大的破坏，所以目前还是先藏起来吧。 - Nightmare-Eclipse...

CVE-2026-41651

🔥 CVE-2026-41651 — PackageKit TOCTOU 本地权限提升 Pack2TheRoot 针对 PackageKit 守护进程的本地权限提升漏洞利用程序。 通过 TOCTOU 竞态条件漏洞，将权限从非特权本地用户提升至 root。 📌 概述 CVE-2026-41651 （也称为 Pack2TheRoot ）是 PackageKit 中的一个严重 TOCTOU（检查时间到使用时间） 竞态条件漏洞。PackageKit 是许多 Linux 发行版用于包管理抽象的系统服务。 该漏洞允许本地非特权用户在特定条件下操纵 PackageKit 事务状态并绕过授权检查。 影响...

CVE-2026-41651-analysis

CVE-2026-41651 — Pack2TheRoot 分析 PackageKit 本地权限提升（TOCTOU 竞态条件） CVSS v3.1：8.8（高危） | CWE-367 | 发布时间：2026-04-22 📌 概述 本仓库整理了针对 2026 年 4 月公开的 PackageKit 本地权限提升漏洞 CVE-2026-41651（Pack2TheRoot） 的个人分析报告及研究资料。 项目| 内容 ---|--- CVE ID| CVE-2026-41651 漏洞名称| Pack2TheRoot 受影响软件| PackageKit 1.0.2 1.3.4 补丁版本|...

CVE-2024-11222

GitLab CE/EE is affected by a Time-of-check Time-of-use (TOCTOU) race condition in pipeline creation, impacting versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 . Under certain conditions, a developer user could perform actions in the context of another user's merge re...

CVE-2024-11222 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed a developer user to perform actions in the context of another user's merge request commit due to a race...

CVE-2024-50379-POC

CVE-2024-50379 漏洞利用与POC（概念验证） 此仓库包含针对 CVE-2024-50379 （影响 Apache Tomcat 的一个漏洞）的概念验证（POC）。该问题涉及 检查时间与使用时间（TOCTOU）竞争条件 ，可能导致 远程代码执行（RCE） ，尤其是在不区分大小写的文件系统（如 Windows）上。 目录 描述 POC 使用 安全注意事项 许可证 描述 CVE-2024-50379 是 Apache Tomcat 中的一个漏洞，允许攻击者通过 TOCTOU 竞争条件执行任意代码。在不区分大小写的文件系统（例如 Windows 或 macOS）以及配置不当的...

CVE-2026-77972

Time-of-check Time-of-use TOCTOU Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address it approved, so the HTTP clients the library ships receive t...

CVE-2025-5777

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 免责声明 仅限授权使用。 使用前自行验证授权是你的责任。 对于因使用本工具而对你提起的任何法律或刑事诉讼，我不承担任何责任。 描述 针对 Citrix NetScaler Gateway 和 AAA 虚拟服务器中内存泄露的外部、未经身份验证的利用程序 利用 Web 应用程序中输入验证不足来触发有效载荷，并利用 TOCTOU 竞态条件来从内存中抓取变量 资产发现与暴露分析 - 红队/紫队 - 组织 方法一：搜索引擎 Dorkin...

CVE-2026-18069

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use TOCTOU race condition...

Security Bulletin: IBM i is Affected By A Race Condition Vulnerability in SQL Query Engine [CVE-2026-18069]

Summary IBM i is vulnerable to obtaining ownership of a file due to a time-of-check to time-of-use race condition CVE-2026-18069 in SQL Query Engine SQE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18069 DESCRIPTION: IBM i could allow a local attacker to...

CVE-2026-18069 IBM i is Affected By A Race Condition Vulnerability in SQL Query Engine []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-18069

CVE-2026-18069 is a time-of-check to time-of-use (TOCTOU) race condition in the SQL Query Engine (SQE) of IBM i (versions 7.3, 7.4, 7.5, and 7.6). A local attacker with low privileges can obtain ownership of arbitrary file system objects , resulting in a changed scope with low impact on confident...

EUVD-2026-78147

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-33825

🔵 CVE-2026-33825 — “BlueHammer” 🔵 Microsoft Defender ローカル権限昇格 LPE BlueHammer は、Windows システム上の Microsoft Defender コンポーネントに影響を与える高深刻度のローカル権限昇格脆弱性です。 この欠陥により、低権限の攻撃者がファイルシステムの競合状態と特権的な Defender 操作を悪用して NT AUTHORITY\SYSTEM に権限を昇格できます。 📌 概要 🧠 BlueHammer とは？ BlueHammer は、特権的な Microsoft Defender 操作内の...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

CVE-2022-42917

A flaw was found in FRRouting FRR. A local service user can exploit a Time-of-check to time-of-use TOCTOU race condition by monitoring the configuration directory and replacing configuration files with symbolic links during their creation. This manipulation allows the user to change the ownership...

EUVD-2022-56059

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

UBUNTU-CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...