Lucene search
+L

10 matches found

Kitploit
Kitploit
•added 2026/09/22 11:25 a.m.•9 views

CVE-2025-27591

Below - Local Privilege Escalation CVE-2025-27591 Below .log to any root-owned file like /etc/passwd. When below snapshot is executed with sudo, it forcibly sets mode 0666 on the log file and writes to it—even if it's a symlink. This allows injection of a root-privileged user without password,...

7.3AI score0.00364EPSS
SaveExploits23References1
Kitploit
Kitploit
•added 2026/09/22 12:52 a.m.•7 views

CVE-2025-27591

CVE-2025-27591 introduction below versions v0.9.0 are vulnerable to a local privilege escalation vulnerability duo to the fact that the program creates a world-writable log file, an a world writable log file instead, the attacker can replace the log file with a symblink to any system-critical fil...

7.3AI score0.00364EPSS
SaveExploits23References3
Kitploit
Kitploit
•added 2026/09/21 5:22 p.m.•11 views

CVE-2025-27591

CVE-2025-27591 description Basically below tool allow for universal modification on its log file which lead to privilege escalation as root. details. The log file created by below is world-writable, allowing any user to modify or replace it. An attacker can exploit this by creating a symbolic lin...

7.7AI score0.00364EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/21 7:45 a.m.•13 views

CVE-2025-27519

Below Privilege Escalation Exploit CVE-2025-27519 This repository contains a proof-of-concept PoC Bash script to exploit the Below privilege escalation vulnerability CVE-2025-27519 on Linux systems. The exploit allows a local user to escalate privileges to root by abusing the way the below binary...

9.3CVSS6AI score0.01388EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/21 6:32 a.m.•11 views

Below-Logger-Symlink-Attack_CVE-2025-27591

CVE-2025-27591 Exploit - Below Logger Symlink Attack A Bash-based privilege escalation exploit targeting the below system performance monitoring tool. This refurbished exploit leverages a symlink vulnerability in the logging mechanism to inject a root user into /etc/passwd, achieving full root...

7.4AI score0.00364EPSS
SaveExploits23References1
GithubExploit
GithubExploit
•added 2025/11/19 7:56 p.m.•320 views

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 introduction below versions v0.9.0 ar...

6.8CVSS7.7AI score0.00364EPSS
SaveExploits23
GithubExploit
GithubExploit
•added 2025/08/22 8:05 a.m.•313 views

Exploit for CVE-2025-27519

Below Privilege Escalation Exploit CVE-2025-27519 This repo...

9.3CVSS9.9AI score0.01388EPSS
SaveExploits23
GithubExploit
GithubExploit
•added 2025/07/12 10:50 p.m.•768 views

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

Below - Local Privilege Escalation CVE-2025-27591 B...

6.8CVSS7.8AI score0.00364EPSS
SaveExploits23
OSV
OSV
•added 2021/04/21 10:15 p.m.•15 views

ALPINE-CVE-2020-27569

Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system...

7.5CVSS7.1AI score0.009EPSS
SaveExploits0References1
Prion
Prion
•added 2017/03/02 6:59 a.m.•30 views

Spoofing

An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data...

2.1CVSS5.5AI score0.00256EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder