10 matches found
CVE-2025-27591
CVE-2025-27591 description Basically below tool allow for universal modification on its log file which lead to privilege escalation as root. details. The log file created by below is world-writable, allowing any user to modify or replace it. An attacker can exploit this by creating a symbolic lin...
CVE-2025-27591
Below - Escalada local de privilegios CVE-2025-27591 Below .log a cualquier archivo propiedad de root, como /etc/passwd. Cuando se ejecuta below snapshot con sudo, fuerza el modo 0666 en el archivo de log y escribe en él, incluso si se trata de un enlace simbólico. Esto permite inyectar un usuari...
CVE-2025-27591
CVE-2025-27591 简介 below 版本 v0.9.0 存在本地权限提升漏洞，原因是程序创建了一个全局可写的日志文件。由于日志文件是全局可写的，攻击者可以将日志文件替换为指向任何系统关键文件的符号链接，并能够编辑该文件以 root 身份登录。 以下漏洞利用针对 /etc/ld.so.preload 来弹出一个 root 反向 shell，并在操作前清除所有入侵指标。 该漏洞仅在以下系统上可利用：这些系统随附的安装包不创建日志文件目录，或者以特定权限创建该目录，和/或依赖程序自行创建日志目录。此类系统包括：Ubuntu、Arch Linux、Gentoo 等。 CVE 分析 发...
CVE-2025-27519
Exploit di elevazione dei privilegi di Below CVE-2025-27519 Questo repository contiene uno script Bash proof-of-concept PoC per sfruttare la vulnerabilità di elevazione dei privilegi di Below CVE-2025-27519 su sistemi Linux. L'exploit consente a un utente locale di elevare i propri privilegi a ro...
Below-Logger-Symlink-Attack_CVE-2025-27591
CVE-2025-27591 Exploit - Attacco Symlink del Logger Below Un exploit di escalation dei privilegi basato su Bash che mira allo strumento di monitoraggio delle prestazioni di sistema below. Questo exploit rinnovato sfrutta una vulnerabilità symlink nel meccanismo di logging per iniettare un utente...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591 introduction below versions v0.9.0 ar...
Exploit for CVE-2025-27519
Below Privilege Escalation Exploit CVE-2025-27519 This repo...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
Below - Local Privilege Escalation CVE-2025-27591 B...
ALPINE-CVE-2020-27569
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system...
