kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's IP Generic Routing Encapsulation ipgre component. This vulnerability allows a local attacker with network administration capabilities in one network namespace to modify a tunnel residing in a different network namespace where they lack privileges. This is du...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

CVE-2017-7184

CVE-2017-7184 – लिनक्स कर्नेल XFRM विशेषाधिकार वृद्धि कोई सुडो नहीं अवलोकन इस रिपॉजिटरी में CVE-2017-7184 के लिए एक प्रमाण-अवधारणा स्थानीय विशेषाधिकार वृद्धि शोषण है, जो XFRM IPsec नेटलिंक उपप्रणाली में एक लिनक्स कर्नेल भेद्यता है। शोषण दर्शाता है कि कैसे एक अननुदानित उपयोगकर्ता निम्नलिखित द्वारा...

Strutter

Strutter CVE-2018-11776 के लिए प्रूफ ऑफ कॉन्सेप्ट, जो Shodan API पर लक्ष्य खोजने की क्षमता के साथ आता है CVE-2018-11776 Apache Struts संस्करण 2.3 से 2.3.34 और 2.5 से 2.5.16 में दूरस्थ कोड निष्पादन Remote Code Execution संभव है जब बिना नेमस्पेस के परिणामों का उपयोग किया जाता है और साथ ही, उनके ऊपर...

CVE-2021-3493

CVE-2021-3493 — Élévation de privilèges locale Ubuntu OverlayFS Une preuve de concept fonctionnelle pour CVE-2021-3493 , une vulnérabilité d'élévation de privilèges locale dans l'implémentation OverlayFS du noyau Ubuntu. Un utilisateur non privilégié peut monter un système de fichiers overlay dan...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 & CVE-2023-32629 GameOverLay - वास्तविक होस्ट रूट एस्केप PoC एक इंटरैक्टिव, बहु-चरणीय लोकल प्रिविलेज एस्केलेशन LPE प्रूफ ऑफ कॉन्सेप्ट PoC जो Ubuntu Linux कर्नेल OverlayFS कमजोरियों CVE-2023-2640 / CVE-2023-32629 को लक्षित करता है। मानक स्वचालित एक-लाइनर्स के विपरीत जो आपके इंटरैक्टि...

gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled

Summary actrunner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only Privileged is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML ar...

GHSA-X4Q3-GCJ3-M6CF gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled

Summary actrunner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only Privileged is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML ar...

CVE-2024-1086

CVE-2024-1086 لأغراض التعلم. المراجع: https://pwning.tech/nftables/ https://github.com/Notselwyn/CVE-2024-1086 Kconfig: +CONFIGCONFIGFSFS=y +CONFIGSECURITYFS=y +CONFIGNFTABLES=y mnlcbrun: Operation not supported +CONFIGNETFILTERNETLINKGLUECT=y +CONFIGNETLINKDIAG=y +CONFIGNFTCT=y...

CIFSwitch

CIFSwitch CVE-2026-46243 Writeup !WARNING يتم توفير PoC فقط لمساعدة المدافعين والمشرفين وفرق الأمن المصرح لهم على التحقق من التصحيحات والتخفيفات والكشف والتعرض على الأنظمة التي يملكونها أو المصرح لهم صراحةً باختبارها. أنت وحدك المسؤول عن ضمان أن استخدامك لهذه المادة قانوني ومصرح به وخاضع للتحكم...

OVSwrap

OVSwrap CVE-2026-64531 Writeup !WARNING يُقدَّم هذا البرهان المفاهيمي PoC فقط لمساعدة المدافعين، ومطوّري الصيانة، وفرق الأمن المصرَّح لهم على التحقق من التصحيحات، والتخفيفات، وكشوفات الحماية، ومدى التعرّض على الأنظمة التي يملكونها أو التي صرِّح لهم صراحةً باختبارها. أنت وحدك المسؤول عن ضمان أن...

CVE-2015-1328

CVE-2015-1328 TryHackMe Walkthrough – Linux Kernel Privilege Escalation CVE-2015-1328 उद्देश्य इस वॉकथ्रू का उद्देश्य एक कम-विशेषाधिकार वाले उपयोगकर्ता karen से root तक विशेषाधिकार एस्केलेशन करना था, एक कमजोर Linux कर्नेल का शोषण करके। चरण 1 – प्रारंभिक एन्यूमरेशन SSH के माध्यम से लक्ष्य मशीन से...

PT-2026-105548

Summary act runner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only Privileged is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML a...

CVE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

CVE-2026-93546

The Apache HTTP Server (version 2.4.68 and prior) is vulnerable to an integer overflow in the mod_dav_fs component. An authenticated WebDAV client with write access can crash worker processes and cause persistent corruption of a directory's property database. This is achieved by sending PROPPATCH...

CVE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...