| عنوان | https://github.com/exelban Stats < v2.11.22 Local Privilege Escalation |
|---|
| الوصف | The Stats application is vulnerable to a local privilege escalation due to the insecure implementation of its XPC service. The XPC server does not enforce client validation, and exposed methods are vulnerable to multiple command injection vulnerabilities. As a result, any client can connect to the XPC server and call vulnerable methods to execute arbitrary command as root. |
|---|
| المصدر | ⚠️ https://winslow1984.com/books/cve-collection/page/stats-v21122-local-privilege-escalation |
|---|
| المستخدم | winslow1984 (UID 79140) |
|---|
| ارسال | 01/01/2025 11:02 PM (2 سنوات منذ) |
|---|
| الاعتدال | 11/01/2025 08:17 PM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 291269 [exelban stats حتى 2.11.21 XPC Service shouldAcceptNewConnection تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|