Tag: Privilege Escalation
A stray quote in a file path gives Mac attackers root
JFrog researchers showed how one character in a crafted path turns a Parallels Desktop install into full control of a…
Acronis backup add-on flaw already exploited on Linux hosts
A privilege escalation bug in Acronis backup extensions for cPanel and WHM is under limited, targeted attack against hosting infrastructure.
cPanel bug lets one mailbox account seize the whole server
One cPanel account with mail rights could reach root on a shared server before this week's fix.
Chaotic Eclipse returns with a bypass for Defender’s ShieldBreak fix
A fresh proof of concept says Microsoft's fix for a Defender escalation bug leaves a gap.
Microsoft tops 974 fixes in record Patch Tuesday drop
September's Patch Tuesday set a record with 974 fixes, two exploited zero-days and a cluster of potentially wormable bugs.
Zero-day hunter adds Avast and Nvidia bugs to a CrowdStrike streak
Nightmare Eclipse adds Avast and Nvidia zero-day exploits to its CrowdStrike drop, and Gen says the Avast bug is fixed.
PostGREShell bug turns lowly PostgreSQL backup roles into superusers
A 12-year-old PostgreSQL replication bug lets low-privilege backup accounts load code and become superusers.
FalconFlank demo lifts CrowdStrike Falcon privileges on patched Windows
A new public exploit abuses CrowdStrike Falcon Sensor's macro cleanup routine to raise privileges on fully patched Windows.