Tag
Itech-gmbh Ilabclient: Local credential exposure (CVE-2024-56428)
1 TTP 2 CVEsItech-gmbh Ilabclient version 3.7.1 stores credentials in cleartext within an Apache Derby database, allowing local attackers to extract configuration data via the ij tool.
TeamViewer: Local privilege escalation via installer staging (CVE-2026-111583)
2 TTPs 9 CVEsAn improper access control vulnerability in the TeamViewer installer staging directory allows local low-privileged users to achieve arbitrary code execution as SYSTEM via a crafted installer options file.
Fidelis Network and Deception: Local Privilege Escalation (CVE-2022-0486)
2 TTPs 1 CVEMultiple Fidelis products are vulnerable to local privilege escalation due to insecure file permissions on binaries and scripts owned by the fidelis user, allowing for unauthorized root access via sudo.
Dell Application Store Incorrect Permission Assignment Vulnerability
2 TTPs 1 CVEAn incorrect permission assignment vulnerability in the Dell Application Store allows a local low-privileged attacker to disclose sensitive information.
Local Privilege Escalation in Colorful iGameCenter
1 TTP 1 CVECVE-2026-109520 is a local privilege escalation vulnerability in Colorful iGameCenter 2.0.0.82 allowing unauthorized actions via manipulated IOCTL requests to the AMDRyzenMasterDriver.sys driver.
Local Privilege Escalation Vulnerability in Zammad
1 TTPA local attacker can exploit a vulnerability in Zammad to perform privilege escalation on the host system.
Local Arbitrary Code Execution and Denial of Service Vulnerability in Red Hat CloudForms
1 TTPRed Hat CloudForms contains a local vulnerability that allows an attacker to execute arbitrary code with user-level privileges or trigger a denial-of-service condition.
Local Privilege Escalation in IBM Informix Dynamic Server
1 TTP 1 CVEA local privilege escalation vulnerability in the oninit setuid-root utility of IBM Informix Dynamic Server 14.10 and 15.0 allows local authenticated users to gain elevated system privileges.
Ubuntu Desktop Vulnerability Allows Local Root Access via snap-confine
1 TTP 1 CVEA high-severity vulnerability, CVE-2026-8933, in Ubuntu's snap-confine component of the snapd service allows an unprivileged local user to gain root access on affected Ubuntu Desktop systems by exploiting race conditions during temporary file creation, enabling full administrative control.
CVE-2026-15506: SecureAge CatchPulse Local Privilege Escalation via Heap-based Buffer Overflow
1 TTP 1 CVEA heap-based buffer overflow vulnerability, CVE-2026-15506, in the `saappctl.sys` driver of SecureAge CatchPulse versions up to 10.9.3 allows a local attacker to achieve privilege escalation, and an exploit has been publicly disclosed.
Multiple Vulnerabilities in ImageMagick Allow for DoS and Potential Data Exposure
2 rules 2 TTPsA local attacker can exploit multiple vulnerabilities in ImageMagick to perform a denial of service attack or affect confidentiality, availability, and integrity.