CVE-2023-42931

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Nous exigeons le retour en sécurité de tous les citoyens pris en otage par le groupe terroriste Hamas. Nous ne nous reposerons pas tant que chaque otage n'aura pas été libéré et ne sera pas rentré chez lui en sécurité. Vous pouvez les aider à rentrer chez...

libewf

libewf — это библиотека для доступа к формату Expert Witness Compression Format EWF. Информация о проекте: Статус: экспериментальный Лицензия: LGPL-3.0-or-later Поддерживаемые форматы EWF для чтения и записи: SMART .s01 EWF-S01 EnCase .E01 EWF-E01 .Ex01 EWF2-Ex01 Не поддерживаются: .Ex01 EWF2-Ex0...

subpath-exploit

Пример ухода из Kubernetes через CVE-2017-1002101 Описание Узнав о проблеме и следуя этому руководству, я захотел изучить её подробнее. Этот репозиторий содержит несколько развёртываний подов и вспомогательные shell-скрипты, которые демонстрируют механизм атаки самым простым способом, чтобы...

vulnerable-container-hub

Проект OWASP Vulnerable Container Hub Предыстория Существует множество репозиториев, предоставляющих уязвимые среды, такие как веб-приложения, контейнеры или виртуальные машины, тем, кто хочет изучать безопасность, поскольку это помогает не только студентам или новичкам в этой области освоить...

DriverJack

DriverJack Einleitung DriverJack ist ein Tool, das entwickelt wurde, um einen verwundbaren Treiber zu laden, indem weniger bekannte NTFS-Techniken missbraucht werden. Diese Methode umgeht die Registrierung eines Treiberdienstes auf dem System, indem sie einen bestehenden Dienst kapert, und fälsch...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

sharesniffer

sharesniffer sharesniffer è uno strumento di analisi di rete per trovare condivisioni di file aperte e chiuse sulla tua rete locale. Include l'individuazione automatica della rete e il montaggio automatico di qualsiasi condivisione cifs e nfs aperta. Come usare Esempio per trovare tutti gli host ...

CVE-2025-9074

Descrizione Realizzato con vibe coding, un piccolo script di exploit in Bash puro senza dipendenze da strumenti che potrebbero non essere installati. Lo script comunica con l'API Docker interna, crea e avvia un nuovo contenitore, monta l'unità C dell'host ed esegue un comando all'interno. L'outpu...

CVE-2023-0386-go-poc

PoC em Go do CVE-2023-0386 ./main /tmp/fuse Executará o programa e criará um mount fuse no diretório "/tmp/fuse". Espera que você tenha compilado o shell no diretório raiz com o nome "shell" por padrão. Depois de executar o programa, deve haver um binário executável no diretório "/tmp/ovlmerged/"...

CVE-2024-21626

Nutzung: 1. git clone https://github.com/cdxiaodong/CVE-2024-21626 2. docker-compose up Überprüfung: Wenn /etc/passwd des Hosts erhalten werden kann, ist die Schwachstelle vorhanden Umgebung: runc: =v1.0.0-rc93,=1.1.11 Angriffsdetails und Prinzip: In den betroffenen Versionen von runc werden...

CVE-2025-6018-6019-PoC

CVE-2025-6018 & CVE-2025-6019: PoC für lokale Privilege Escalation Ein robustes Proof of Concept PoC zur Verkettung von CVE-2025-6018 PAM/Polkit Active-Session-Bypass und CVE-2025-6019 libblockdev-SUID-Mount-Fehler, um auf verwundbaren Linux-Systemen Root-Zugriff zu erlangen. Haftungsausschluss...

rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708 e CVE-2025-56709 【CVE-2025-56709】 Buffer Overflow in savepath Panoramica della vulnerabilità Nelle versioni di rtty =v9.0.0, il metodo fileinfo presenta una vulnerabilità di overflow che causa la scrittura continua di dati nella variabile globale savepath, innescando un buffer...

docker_cve-2015-2925

Docker + CVE-2015-2925 = fuga da --volume Una recente vulnerabilità in Linux, nota da circa metà dell'anno diversi mesi pubblicamente, ha reso possibile fuggire dai bind mount. In particolare, nel caso di Docker, è possibile fuggire dall'interno della directory montata tramite l'opzione --volume...

CVE-2026-80644

In the Linux kernel, the following vulnerability has been resolved: ocfs2: don't BUGON an invalid journal dinode BUG A fuzzed OCFS2 image can corrupt the current slot journal dinode while mount is still in progress. The mount path first reports the invalid journal block and then crashes in...

CVE-2025-34159

CVE-2025-34159: Iniezione di Docker Compose in Coolify Panoramica della Vulnerabilità Campo| Valore ---|--- ID CVE| CVE-2025-34159 Interessa| Coolify ≤ v4.0.0-beta.420.6 Corretta in| v4.0.0-beta.420.7 Gravità| Critica CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE|...

CVE-2023-0386-libs

Installa l'ambiente di compilazione root@kitploit: sudo apt install -y gcc libfuse-dev pkg-config Compila l'exploit root@kitploit: gcc -Wall CVE-2023-0386.c pkg-config fuse --cflags --libs -DFILEOFFSETBITS=64 -o CVE-2023-0386-exp -static -lfuse Genera lo shellcode root@kitploit: msfvenom -p...

EUVD-2026-67548

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfscheckrestartarea validates that the $LogFile restart area and its trailing log client record array fit within the system page size: u16 raofs, ralen, caofs; ... ralen =...

CVE-2026-80672

CVE-2026-80672 is a u16 truncation in the Linux kernel's in-kernel NTFS driver, specifically in ntfs_check_restart_area(). The variable ra_len is declared as u16, but the computed length of the $LogFile log client record array can exceed 65535 (e.g., log_clients of 410 yields 65600), causing trun...

CVE-2026-80644 ocfs2: don't BUG_ON an invalid journal dinode

In the Linux kernel, the following vulnerability has been resolved: ocfs2: don't BUGON an invalid journal dinode BUG A fuzzed OCFS2 image can corrupt the current slot journal dinode while mount is still in progress. The mount path first reports the invalid journal block and then crashes in...

EUVD-2026-67520

In the Linux kernel, the following vulnerability has been resolved: ocfs2: don't BUGON an invalid journal dinode BUG A fuzzed OCFS2 image can corrupt the current slot journal dinode while mount is still in progress. The mount path first reports the invalid journal block and then crashes in...