CVE-2025-27591-PoC

CVE-2025-27591 PoC: Escalada de Privilegios Local en Below v0.9.0 Prueba de Concepto para CVE-2025-27591, una vulnerabilidad que permite a usuarios locales sin privilegios escalar sus privilegios a root mediante ataques de enlace simbólico. 🕵️‍♂️ Detalles Técnicos La vulnerabilidad afecta al...

Linux-Privilege-Escalation-CVE-2025-27591

CVE-2025-27591 - Escalada de Privilegios mediante Enlace Simbólico Escribible en below Resumen Este es un exploit simple para CVE-2025-27591 , una vulnerabilidad de escalada de privilegios local en la herramienta de monitoreo del sistema Linux below. La vulnerabilidad afecta a versiones anteriore...

CVE-2021-4034

CVE-2021-4034 root@kitploit: $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

CVE-2025-70341

CVE-2025-70341: Unsichere Berechtigungen + beliebige Codeausführung in App-Auto-Patch Zusammenfassung App-Auto-Patch v3.4.2 erstellt sein Arbeitsverzeichnis mit weltweit beschreibbaren Berechtigungen chmod 777, was eine lokale TOCTOU-Wettlaufbedingung Time-of-Check-to-Time-of-Use ermöglicht. Ein...

CVE-2025-27591

CVE-2025-27591 – Privilegieneskalation durch Symlink-Missbrauch in below 🛑 Haftungsausschluss : Dieser Exploit wird nur für Bildungszwecke und autorisierte Sicherheitstests bereitgestellt. Die unbefugte Nutzung kann illegal sein. 🧠 Übersicht below ist ein von Facebook für Linux-Systeme entwickelt...

CVE-2024-33352

CVEID : CVE-2024-33352 Bluestacks Advisory ID : steht aus Name des/der betroffenen Produkts/Produkte und Versionen : BlueStacks für Windows Versionen vor 10.40.1000.502 Verwundbarkeitstyp : CWE-552: Für externe Parteien zugängliche Dateien oder Verzeichnisse Zusammenfassung BlueStacks ist ein...

CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 e CVE-2025-34323 Nagios Log Server Exploits de Prova de Conceito para CVE-2025-34322 e CVE-2025-34323 no Nagios Log Server, juntamente com um script combinado para obter um shell como root. CVE-2025-34322 Após a autenticação, substitua seu ID de sessão nestes dois comandos curl. O...

Apache-GOExploiter

🛠 ApacheGoExploiter – Toolkit di Exploit per il Metodo PUT CVE-2025-24813 ApacheGoExploiter è uno strumento proof-of-concept basato su Go per scansionare e sfruttare server Apache Tomcat vulnerabili a CVE-2025-24813. Verifica il supporto HTTP PUT esposto sulla porta 8080 e tenta di caricare file ...

CVE-2025-27591-PoC

CVE-2025-27591 Proof Of Concept CVE-2025-27591 è una vulnerabilità di escalation dei privilegi che ha interessato il servizio Below prima della versione 0.9.0. Il problema derivava dalla creazione di una directory scrivibile da tutti gli utenti in /var/log/below. Un attaccante potrebbe sfruttare...

CVE-2024-34474

CVE-2024-34474 Clario fino al 2024-04-11 per Windows Desktop ha permessi deboli per %PROGRAMDATA%\Clario e tenta di caricare DLL da lì come SYSTEM. Descrizione: L'applicazione desktop Clario per Windows tenta di caricare librerie DLL inesistenti da C:\ProgramData\Clario\ e...

CVE-2024-28589

CVE-2024-28589 Una vulnerabilità è stata scoperta in Axigen Mail Server per Windows, che interessa tutte le versioni fino alla 10.5.18 e consente l'escalation locale dei privilegi. Descrizione: È stato riscontrato che Axigen Mail Server è vulnerabile a un'escalation locale dei privilegi a causa d...

CVE-2025-27591

CVE-2025-27591 Exploit di escalation dei privilegi PoC per Below v0.9.0 Disclaimer Questo exploit è destinato esclusivamente a scopi educativi. È stato progettato per aiutare gli utenti a comprendere le vulnerabilità di sicurezza e migliorare le loro conoscenze in ambito cybersecurity. L'autore n...

CVE-2026-14875

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...

PYSEC-2026-873 OpenStack Nova live snapshots use an insecure local directory

OpenStack Compute Nova Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the ServeCreateOrUpdatePlaylist process. An attacker can overwrite or create arbitrary files on the host system by supplying a crafted playlist ID that resolves to an...

CVE-2026-46710

Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer. During installation, the installer invokes powershell.exe without using an absolute path after setting the working directory to the...

CVE-2026-46710

Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer. During installation, the installer invokes powershell.exe without using an absolute path after setting the working directory to the...

PT-2026-52972

Name of the Vulnerable Software and Affected Versions Notepad++ versions 8.9.4 through 8.9.5 Description The installer contains a local privilege escalation issue. During the installation process, the installer invokes powershell.exe without specifying an absolute path after setting the working...

Creation of Temporary File in Directory with Insecure Permissions

Overview @earendil-works/pi-coding-agent is a Coding agent CLI with read, bash, edit, write tools and session management Affected versions of this package are vulnerable to Creation of Temporary File in Directory with Insecure Permissions in the process handling temporary extension package instal...

CVE-2026-34354

Akamai Guardicore Platform Agent GPA and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation. The GPA service creates an IPC socket in the world-writable /tmp directory. It accepts unauthenticated IPC control messages. This enables a TOCTOU vulnerability in the...