https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:38:38 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-64954 <p>Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization provider.</p> <p>This allows a user who can run arbitrary VQL (usually with the &#34;analyst&#34; role) to launch new collections (usually requires the &#34;investigator&#34; role). This vulnerability is an escalation from an analyst to investigator role.</p> <p>Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization provider.</p> <p>This allows a user who can run arbitrary VQL (usually with the &#34;analyst&#34; role) to launch new collections (usually requires the &#34;investigator&#34; role). This vulnerability is an escalation from an analyst to investigator role.</p> https://db.gcve.eu/vuln/fkie_cve-2026-64954 https://db.gcve.eu/vuln/ghsa-j6jv-j266-988h <p>Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization provider.</p> <p>This allows a user who can run arbitrary VQL (usually with the &#34;analyst&#34; role) to launch new collections (usually requires the &#34;investigator&#34; role). This vulnerability is an escalation from an analyst to investigator role.</p> <p>Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization provider.</p> <p>This allows a user who can run arbitrary VQL (usually with the &#34;analyst&#34; role) to launch new collections (usually requires the &#34;investigator&#34; role). This vulnerability is an escalation from an analyst to investigator role.</p> https://db.gcve.eu/vuln/ghsa-j6jv-j266-988h https://db.gcve.eu/vuln/wid-sec-w-2026-2728 <p>Ein Angreifer kann mehrere Schwachstellen in Rapid7 Velociraptor ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Rapid7 Velociraptor ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-2728