CVE-2024-21626

CVE-2024-21626 Per una spiegazione dettagliata di questa vulnerabilità, fai riferimento al mio articolo. Exploit Exploit tramite l'esecuzione di un container Non è necessario creare un'immagine personalizzata, basta eseguire un container con il parametro -w: root@kitploit: docker run -w...

CVE-2024-21626

CVE-2024-21626 POC Requisiti runc 1.1.0 = 1.1.11 Installazione dell'ambiente vulnerabile Distribuire una VM con Ubuntu 20.04 e scaricare Docker seguendo la loro guida root@kitploit: https://docs.docker.com/engine/install/ubuntu/ Sostituire la versione 'runc' patchata in Docker con una vulnerabile...

whoc

whoc Ein Container-Image, das die zugrunde liegende Container-Runtime extrahiert und an einen entfernten Server sendet. Testen Sie die zugrunde liegende Container-Runtime Ihrer bevorzugten CSP-Container-Plattform! WhoC at Defcon 29 Cloud Village Azurescape – whoc-gestützte Forschung, die erste...

CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume

CVE-2026-5555 – Container-Escape über /proc/self/fd-Symlink Übersicht Ein gemeinsam genutztes Volume, das mit rshared-Propagation eingebunden ist, ermöglicht einem bösartigen Container, über /proc/self/fd einen symbolischen Link zu erstellen, der auf eine Host-Datei zeigt. Der in das Volume...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

kernel-exploit-dirtycow

Kernel Exploit — Dirty Cow CVE-2016-5195 Labor zur Privilegieneskalation mittels der Dirty Cow-Schwachstelle, durchgeführt im Rahmen der Spezialisierung in Cybersicherheit der 4Geeks Academy. Beschreibung Dirty Cow ist eine Race-Condition im Speichersubsystem des Linux-Kernels CVE-2016-5195, die ...

php-bypass-disable-functions

php-bypass-disable-functions Demo-Projekt, das zeigt, wie die Sicherheitskontrolle disablefunctions von PHP unter Linux umgangen werden kann, wo Prozesse ihren eigenen Speicher über die spezielle Datei /proc/self/map mithilfe von Standard-Dateioperationen open/seek/read/write einsehen und sogar...

Linux Distros Unpatched Vulnerability : CVE-2026-35025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restriction...

CVE-2026-35025

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

EUVD-2026-38789

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

CVE-2026-35025 ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

CVE-2026-35025

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

CVE-2026-35025

ProFTPD versions affected: 1.3.9b and 1.3.10rc2. Issue: an access control bypass in the RNFR path handling allows authenticated FTP users to bypass Directory ACL restrictions by prefixing paths with /proc/self/root. Root cause: unresolved symlink components in dir_canonical_path() cause dir_check...

CVE-2026-35025 ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

CVE-2026-35025

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the OpenAtNoFollow process. An attacker can cause unintended file ownership or permission changes on host files by placing a symlink in the virt-launcher filesystem, which is then followed via...

PT-2026-52087

Name of the Vulnerable Software and Affected Versions KubeVirt affected versions not specified Description A flaw exists in the safepath package used by virt-handler. The OpenAtNoFollow function utilizes O PATH|O NOFOLLOW to obtain a file descriptor for a path leaf; however, subsequent operations...

PT-2026-51789

Name of the Vulnerable Software and Affected Versions ProFTPD versions 1.3.9b through 1.3.10rc2 Description An access control bypass allows authenticated FTP users to circumvent Directory ACL restrictions. By prefixing paths with /proc/self/root in the RNFR command handler, attackers can exploit...

Malicious code in @a91082900/test_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8349cd7ce2c9ac2321dce8f80e5a46c0064b382fb7e54e975ff27a2dcab1254 The package's main file index.js executes at module load, with no exports and no user-invoked API. On import it issues...

MAL-2026-3680 Malicious code in @a91082900/test_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8349cd7ce2c9ac2321dce8f80e5a46c0064b382fb7e54e975ff27a2dcab1254 The package's main file index.js executes at module load, with no exports and no user-invoked API. On import it issues...