#privilege-escalation — Security Blog

'Copy Fail': Linux Kernel Flaw Lets Any Local User Become Root

A publicly exploitable Linux kernel vulnerability dubbed 'Copy Fail' allows any unprivileged local user to silently overwrite root-owned binaries and seize full system control. Kernels from version 4.14 through 6.18.21 are affected, and a working Python exploit is already public.

Radical Notion Team3 months ago

Old Cisco SD-WAN Flaw Now Under Active Attack — Patch Immediately

A 2022 privilege escalation vulnerability in Cisco SD-WAN software is now being actively exploited in the wild, four years after patches were released. Attackers with any valid local credential can chain two path traversal bugs to seize complete root control of routers, controllers, and orchestra...

Radical Notion Team5 months ago

#privilege-escalation — Security Blog | RadicalNotion.AI