2668 matches found
AnyIO process-pool workers can block indefinitely on undrained stderr
ImpactAnyIO starts process-pool workers with stderr connected to a pipe but never drains that pipe. The worker redirects stdin and stdout to /dev/null to protect its protocol, but does not redirect stderr even though the documentation says all three standard streams are redirected. Worker code th...
xspawn
xspawn xspawn inicia un programa en macOS a través de launchd y nunca ejecuta exec ese programa por sí mismo. El objetivo es que un EDR registre a launchd como el proceso padre, no esta herramienta ni el shell que la invoca. por cenobyte [email protected] 2026...
ysoserial-modified
ysoserial-modified Este es un fork de la aplicación ysoserial original que se puede encontrar aquí: https://github.com/frohoff/ysoserial Descripción de la modificación Debido a cómo funciona Runtime.getRuntime.execString.class en Java, los comandos anidados y complejos donde necesitarás controlar...
CVE-2026-9490
ID de CVE: CVE-2026-9490 Investigador: Vo Duc Thang ugvxb Reconocimiento: https://community.acer.com/en/kb/articles/19668 1. Resumen Ejecutivo Se ha identificado una vulnerabilidad de seguridad crítica en el servicio Acer Care Center ACCSvc.exe. La vulnerabilidad permite a cualquier usuario local...
CVE-2026-9789
CVE 编号： CVE-2026-9789 研究人员： Vo Duc Thang ugvxb 致谢： https://community.acer.com/en/kb/articles/19670 视频 POC： https://drive.google.com/file/d/1B8b42bE68CWMnlqG6eJWi0txGFsHAJZc/view?usp=sharing 1. 执行摘要 在宏碁 NitroSense 软件（PSAdminAgent.exe）中发现了一个严重的本地权限提升漏洞。该漏洞允许任何经过身份验证的本地用户以 SYSTEM...
CVE-2022-0847-DirtyPipe-Exploit
在 Linux Kernel 直至 5.10.101/5.15.24/5.16.10（操作系统）中发现了一个漏洞，且被归类为严重。该漏洞影响了组件 Pipe Handler 的某些未知处理过程。受影响的是机密性、完整性和可用性。 该漏洞于 2022 年 3 月 8 日披露。公告发布在 dirtypipe.cm4all.com。该漏洞的标识符为 CVE-2022-0847。已知易于利用。攻击可能远程发起。利用时需要简单的认证。技术细节未知，但已有公开的利用代码。 升级至版本 5.10.102、5.15.25 或 5.16.11 可消除此漏洞。应用补丁能够解决该问题。修复程序已可下载，地址为...
CVE-2020-11492
CVE-2020-11492 Proof-of-Concept PoC for Docker Desktop for Windows privilege escalation vulnerability. This vulnerability was patched in Docker version 2.3.0.2 on May 11th, 2020. This PoC performs the following: creates a named pipe mimicking docker named pipe \.\pipe\dockerLifecycleServer, call...
CVE-2024-42049-PoC
CVE-2024-42049-PoC CVE Details https://nvd.nist.gov/vuln/detail/CVE-2024-42049 TightVNC Server for Windows before 2.8.84 allows attackers to connect to the control pipe via a network connection. PoC Details article: https://izvd.eu/research/exploiting-cve-2024-42049 tested on: 2.7.10, 2.8.81; mos...
CVE-2022-0847
CVE-2022-0847 Vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes. To compile: gcc poc.c -o poc Usage: ./poc TARGETFILE OFFSET DATA Author and...
CVE-2022-0847-L-nux-PrivEsc
CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. - create by antx at 2022-03-08. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later...
LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus
DirtyPipevirus Dirty Pipe is a kind of Linux exploit. Its CVE is CVE 2022-0847. We use it to delete all files on your Ubuntu. Environment: Ubuntu 20.04 Linux Kernel 5.8 This is the ova file of Ubuntu 20.04:...
linux-privilege-escalation
Linux Privilege Escalation Bash script to check and exploit the CVE-2022-0847 Linux "Dirty Pipe" vulnerability About this Proof of Concept This script allows an unprivileged user on a vulnerable system to do the following: Modify/overwrite read-only files like /etc/passwd. Obtain an elevated shel...
CVE-2018-16509
CVE-2018-16509 Docker Playground "An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction."...
dirtypipetester
Dirty Pipe Vulnerability Check Dirty Pipe CVE-2022-0847 vulnerability check -Run directly to check the vulnerability status of the system you are testing. -To check the vulnerability status of other kernel versions, run by appending x.xx.xxx at the end...
CVE-2022-22715
Entrada de blog: https://whereisk0shl.top/post/break-me-out-of-sandbox-in-old-pipe-cve-2022-22715-windows-dirty-pipe El exploit debe ejecutarse desde INTEGRIDAD BAJA La limpieza no está completa. El exploit solo corrige los objetos TOKEN sobrescritos, pero no la estructura del pool VS. Esta parte...
Rocky Linux 9 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2023_5459)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235459 advisory. ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices CVE-2023-36664 Tenable has extracted the preceding...
CVE-2026-101880
OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...
EUVD-2026-90253
OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval rules by placing...
CVE-2022-0847-Dirty-Pipe-
CVE-2022-0847-Dirty-Pipe- this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline" Max Kellermann, a developer at CM4all a German web hosting company, found it in early 2022 but not by checking for vulnerability. He was debugging when ...