Rich Mirch
Home
Posts
Research
About
All
2025
1
June
1
CVE-2025-32462 , CVE-2025-32463 Sudo chroot, host Option Elevation of Privilege Vulnerabilities
June 30, 2025
· rich
2022
1
May
1
Exploiting Kaseya Unitrends Backup Appliance – Part 1
May 20, 2022
· rich
2021
1
January
1
sudoedit symlink fix for CVE-2021-23240 introduced new vulnerability
January 26, 2021
· rich
2020
4
December
1
Pi-hole Patches Critical Stored XSS Vulnerability
December 24, 2020
· rich
September
2
Metasploit module developed for CVE-2018-18556 VyOS Privilege Escalation
September 25, 2020
· rich
Critical Vulnerabilities Discovered in MoFi Routers
September 2, 2020
· rich
March
1
CVE-2020-3950 VMware Fusion Elevation of Privilege
March 18, 2020
· rich
2019
6
December
1
CVE-2019-19954 Signal Desktop Windows Elevation of Privilege Vulnerability
December 18, 2019
· rich
November
1
CVE-2019-3466 Debian / Ubuntu Privilege Escalation via pg_ctlcluster
November 15, 2019
· rich
August
1
CVE-2018-1792 - IBM MQ Privilege Escalation: Fun with RUNPATH
August 25, 2019
· rich
June
1
CVE-2019-12572 PIA Windows Privilege Escalation: Malicious OpenSSL Engine
June 10, 2019
· rich
February
1
CVE-2019-6724 : Barracuda VPN Client Privilege Escalation on Linux and macOS
February 14, 2019
· rich
January
1
Linux persistence idea - using group passwords
January 9, 2019
· rich
2018
3
December
2
CVE-2018-18629: Keybase Linux privilege escalation
December 21, 2018
· rich
CVE-2018-19788 PoC - polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass
December 9, 2018
· rich
November
1
CVE-2018-18556 - VyOS Privilege escalation via sudo pppd for operator users
November 6, 2018
· rich