65485 matches found
Sudo-Chroot
Descrizione: Sudo prima della versione 1.9.17p1 consente agli utenti locali di ottenere accesso root perché /etc/nsswitch.conf da una directory controllata dall'utente viene utilizzato con l'opzione --chroot. Escalation dei Privilegi Locali tramite sudo-chroot -R...
-CVE-2019-14287-SUDO-bypass-vulnerability
Dieses Repository hat keine README-Datei...
CVE-2026-63404
Faktory is a language-agnostic background job server. In versions prior to 1.10.0 , its embedded Redis bootstrapper writes startup configuration to the fixed, world-writable path /tmp/redis.conf , creating the file only if absent and never validating it on subsequent boots. A local unprivileged u...
CVE-2026-80185 Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root
BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...
CVE-2026-80185
BlueZ 5.86 contains a type confusion vulnerability in its sdp-xml.c parser. A crafted nested ServiceRecord passed via RegisterProfile corrupts the SDP XML parser stack, causing scalar union data to be misinterpreted as a sequence pointer. This allows an unprivileged local caller or an adjacent LE...
CVE-2024-32019_poc
Escalation dei privilegi tramite ndsudo Exploit locale di Netdata Questa è una POC alternativa per sfruttare un'utilità ndsudo vulnerabile inclusa in Netdata al fine di eseguire un'escalation locale dei privilegi. L'exploit funziona aggiungendo lo script nel PATH dell'utente, sostituendo un coman...
PoC-CVE-2021-41773
CVE-2021-41773 PoC Prova di concetto per verificare se gli host sono vulnerabili a CVE-2021-41773. Descrizione https://vulners.com/cve/CVE-2021-41773 È stato trovato un difetto in una modifica apportata alla normalizzazione dei percorsi in Apache HTTP Server 2.4.49-2.4.50. Un attaccante potrebbe...
CVE-2025-55182-Terminal
Scanner de Vulnerabilidade RSC do Next.js CVE-2025-66478 / CVE-2025-55182 Uma ferramenta leve e multithread de Prova de Conceito PoC projetada para detectar e demonstrar a vulnerabilidade de Execução Remota de Código nos React Server Components RSC do Next.js React2Shell. Esta ferramenta permite...
sudo-chroot
Descrizione: Sudo precedente alla versione 1.9.17p1 consente agli utenti locali di ottenere l'accesso root perché /etc/nsswitch.conf da una directory controllata dall'utente viene usato con l'opzione --chroot. Sudo Local Privesc --chroot...
CVE-2026-66152
A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root...
ROOT-OS-DEBIAN-12-CVE-2023-29934 CVE-2023-29934 in llvm-toolchain-14 - Patched by Root
Root has patched CVE-2023-29934 in the llvm-toolchain-14 package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-66152
CVE-2026-66152 is a path traversal vulnerability (CWE-29) in the OPSWAT tarball component of the SonicWall NetExtender Linux client , allowing an attacker to write an arbitrary file as root . The attack vector is network-based with low complexity and no required privileges , though user interacti...
CVE-2026-66152
A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root...
sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
hyperfox
Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...
CVE-2019-14287-write-up
CVE-2019-14287-análise 4294967295 Falha de Sudo Permite que Usuários Restritos Executem Comandos como Root DEMONSTRAÇÃO DA VULNERABILIDADE Adicionar um novo usuário: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // adicione senha ao usuário visudo Adicionar uma nova entrada test...
sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
PwnTillDawn-Portal-Walkthrough
🔐 Valutazione della Vulnerabilità e Test di Penetrazione VAPT 📌 Progetto: Walkthrough di Sfruttamento del Target ⚠️ Questo progetto è solo per scopi educativi e di test autorizzati. L'accesso non autorizzato ai sistemi è severamente vietato. 👨💻 Autore SYAFIQ Ruolo: Penetration Tester Capo 🎯...
ejbca-pqc-lab
Laboratorio EJBCA Pure PQC — Gerarchia PKI a due livelli ML-DSA-65 Un'implementazione pratica di NIST FIPS 204 ML-DSA in una gerarchia PKI a due livelli utilizzando EJBCA Community Edition. 📖 Guida completa: Costruire una PKI post-quantistica: come ho firmato una Root CA e Sub CA usando ML-DSA su...