Snort 3 control socket lets low-privilege local users run commands
Missing socket authentication also allows reading and writing Snort 3 process memory; Cisco has updates and no workaround.
7 stories, newest first · one card per story
Missing socket authentication also allows reading and writing Snort 3 process memory; Cisco has updates and no workaround.
Cisco NX-OS Python sandbox flaw lets a low-privileged authenticated user escape and run operating-system commands.
Ubuntu warns a Plasma Workspace flaw may let a local attacker run code as another user.
Ubuntu patched two local libvirt flaws: a possible code-execution overflow and a TPM log symlink bug.
Ubuntu fixes an incomplete XDG Desktop Portal patch for CVE-2026-40354 that broke file trashing.
Ubuntu warns polkit mishandles cookie input, letting a local attacker crash the daemon or possibly execute arbitrary code.
Ubuntu USN-8751-1 patches Urwid weak PRNG issue allowing local attacker possible denial of service or code execution.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views