CVE-2026-61801

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

CVE-2026-61801 github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

CVE-2026-61801 github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

CVE-2026-43284---DirtyFrag-Analysis-THM-

TryHackMe — CVE-2026-43284: Dirty Frag Stanza: CVE-2026-43284: Dirty Frag Categoria: Linux Privilege Escalation Autore: La mia pagina Panoramica Dirty Frag è una stanza Linux di escalation dei privilegi locali LPE a catena costruita attorno a CVE-2026-43284. L'obiettivo è passare da una shell non...

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

A denial-of-service DoS vulnerability exists in github.com/moby/sys/user before v0.4.1 when parsing specially crafted user or group database files. An attacker able to supply a malicious /etc/passwd or /etc/group-style file may cause excessive memory consumption, potentially resulting in process...

GHSA-MJCV-P78Q-W5FW github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

A denial-of-service DoS vulnerability exists in github.com/moby/sys/user before v0.4.1 when parsing specially crafted user or group database files. An attacker able to supply a malicious /etc/passwd or /etc/group-style file may cause excessive memory consumption, potentially resulting in process...

CVE-2024-24919

CVE-2024-24919 Strumento di exploit per validare la vulnerabilità CVE-2024-24919 sui firewall VPN Checkpoint Questo strumento crea una cartella di output contenente un file "Target-IP.txt". Questo file include il contenuto del file /etc/passwd del target interessato, determinando così se il siste...

CVE-2020-11651

CVE-2020-11651 Uno script che sfrutta SaltStack CVE-2020-11651 e CVE-2020-11652 per aggiungere nuovi utenti a un master Salt vulnerabile inserendo voci in /etc/passwd e /etc/shadow. Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author: Jasper Lievisse...

Dirty-COW-CVE-2016-5195-

Dirtyc0w Docker POC Prerequisiti: Vagrant installato Come usarlo Innanzitutto clona il progetto git clone https://github.com/BrolyCode/Dirty-Cow.git Entra nella cartella cd Dirty-Cow Poi avvia l'ambiente con il comando vagrant up Una volta che il server è stato creato, ci collegheremo via ssh...

CVE-2021-43798

CVE-2021-43798 ┌─✗─s1gh@parrot─/Desktop └──╼ $ python3 grafanapathtraversal.py -H "http://example-url:3000" Read file /etc/passwd root:x:0:0:root:/root:/bin/ash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin...

dirtycow

✅ Requisiti / Versione del kernel interessata Dirty COW è una Local Privilege Escalation LPE nel kernel Linux nota come CVE-2016-5195. :contentReferenceoaicite:0index=0 🎯 Kernel vulnerabile In generale, Dirty COW colpisce i kernel Linux dalla 2.x alla 4.x precedenti alla 4.8.3...

wordpress-snapcreek

wordpress-snapcreek Vulnerabilità di lettura file di snapcreekduplicator https://www.cvedetails.com/cve/CVE-2020-11738/ Passo 1: Apri MSFconsole: e usa wordpressscanner per trovare tutti i plugin usati dalla macchina bersaglio. Passo 2: Attacco usando lo script Python: Installa/aggiorna pip3 sull...

CVE-2024-36821

CVE-2024-36821 Die öffentliche Referenz, die die Mindestinformationen für die durch CVE-2024-36821 abgedeckte Schwachstelle enthält Das Originalvideo mit PoC finden Sie unter - https://www.youtube.com/watch?v=6vHno0ik7JY Der PoC: 1. Verbinden Sie sich mit dem Router über eine UART-Verbindung 2...

CVE-2021-43798

CVE-2021-43798 Directory Traversal und beliebige Dateiauslese in Grafana Autoren: Wagner Alves - Red Team Analyst Dieser Exploit nutzt Schwachstellen in Directory Traversal und beliebiger Dateiauslese in Grafana 8.0 - 8.3 aus, um Dateien wie /etc/passwd, /etc/hosts, /home/user/.ssh/idrsa,...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Analisi e pratica di risposta alla vulnerabilità Copy Fail CVE-2026-31431 Questo progetto è un mini-progetto che analizza il principio di funzionamento della vulnerabilità Copy Fail CVE-2026-31431 del kernel Linux e confronta lo stato prima e dopo la patch utilizzando il checker non distruttivo d...

copyfail2_electric_boogaloo_fix

copyfail2electricboogaloofix Eine temporäre Abschwächung gegen die copyfail-Variante copyfail2electricboogaloo – LPE unter Linux ohne Privilegien über den xfrm-ESP-in-UDP-MSGSPLICEPAGES-no-COW-Schnellpfad. Page-Cache-Schreiben in jede lesbare Datei. Überschreibt eine nologin-Zeile in /etc/passwd...

RootRemover

!WARNING Use isto apenas em sistemas que você possui ou tem autorização para testar. RootRemover CVE-2026-31431 Remove temporariamente a senha do root, usando a CVE-2026-31431 para permitir escalonamento para root independente de arquitetura sem saber a senha do usuário atual. Por favor, use com...

github.com/moby/sys/user: moby/sys/user: Denial of Service via crafted user or group database files

A flaw was found in the moby/sys/user package. The package does not properly limit memory allocation when parsing Unix-style user and group database files, such as /etc/passwd or /etc/group. An attacker who can supply a specially crafted file can cause excessive memory consumption, leading to a...

CVE-2020-25223

CVE-2020-25223 Uno script PoC per testare CVE-2020-25223 contro un Sophos UTM vulnerabile. Dato un indirizzo IP, lo script tenta di scaricare una copia del file /etc/shadow del dispositivo. Ricerca originale: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

CVE-2021-41773-PoC

CVE-2021-41773 Vulnerabilità di path traversal e divulgazione di file in Apache HTTP Server 2.4.49 Questo script testa Apache HTTP Server 2.4.49 Uso: Opzioni di CVE-2021-41773.py Solo per un singolo IP: python CVE-2021-41773.py IPaddress Opzione -f Per elenco di IP in un file Esempio: python...