CVE-2020-15349

BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool implements an XPC interface that allows file operations to any process (copy, move, delete) as root and changing permissions.

• CWE-862

• https://binarynights.com/blog/posts/forklift-3-4-security-update.htmlRelease Notes, Vendor Advisory
• https://insinuator.net/2020/11/forklift-lpe/Exploit, Third Party Advisory
• https://binarynights.com/blog/posts/forklift-3-4-security-update.htmlRelease Notes, Vendor Advisory
• https://insinuator.net/2020/11/forklift-lpe/Exploit, Third Party Advisory

Published

Nov 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15343Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenti…5.3
• CVE-2020-15344Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenti…5.3
• CVE-2020-15345Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenti…5.3
• CVE-2020-15346Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBA…5.3
• CVE-2020-15347Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8b…9.8
• CVE-2020-15348Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of liv…9.8
• CVE-2020-1535An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15350RIOT 2020.04 has a buffer overflow in the base64 decoder. Th…9.8
• CVE-2020-15351IDrive before 6.7.3.19 on Windows installs by default to %PR…7.8
• CVE-2020-15352An XML external entity (XXE) vulnerability in Pulse Connect …7.2
• CVE-2020-15354Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-15355Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…