CVE-2023-0386

CVE-2023-0386...

CVE-2023-0386

Установка root@kitploit: make all Использование Откройте два терминала и в первом введите root@kitploit: ./fuse ./ovlcap/lower ./gc Во втором терминале введите root@kitploit: ./exp...

HTB-TwoMillion-Writeup

HTB-TwoMillion-Writeup HackTheBox — разбор машины TwoMillion — злоупотребление API, внедрение команд и CVE-2023-0386 HackTheBox — Разбор TwoMillion HackTheBox — Разбор TwoMillion Информация о машине Поле| Значение ---|--- Имя| TwoMillion Сложность| Easy ОС| Linux IP| 10.10.11.221 CVE| CVE-2023-03...

cve-2023-0386

В этом репозитории нет README...

TwoMillion-Machine-Writeup

マシンについて...

CVE-2023-0386-go-poc

Go PoC для CVE-2023-0386 ./main /tmp/fuse Запустит программу и создаст FUSE-монтирование в каталоге "/tmp/fuse". Предполагается, что вы скомпилировали shell в корневом каталоге, по умолчанию он называется "shell". После запуска программы в каталоге "/tmp/ovlmerged/" должен появиться исполняемый...

CVE-2023-0386

CVE-2023-0386 root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp...

CVE-2023-0386-libs

Установка среды сборки root@kitploit: sudo apt install -y gcc libfuse-dev pkg-config Компиляция эксплойта root@kitploit: gcc -Wall CVE-2023-0386.c pkg-config fuse --cflags --libs -DFILEOFFSETBITS=64 -o CVE-2023-0386-exp -static -lfuse Генерация shellcode root@kitploit: msfvenom -p linux/x86/exec...

CVE-2023-0386

CVE-2023-0386 WIP...

CVE-2023-0386

Установка root@kitploit: make all Использование Откройте два терминала и в первом введите root@kitploit: ./fuse ./ovlcap/lower ./gc Во втором терминале введите root@kitploit: ./exp...

Exploit for Improper Ownership Management in Debian Debian_Linux

HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup —...

CVE-2026-0386 Windows Deployment Services Remote Code Execution Vulnerability

...

CVE-2026-0386 Windows Deployment Services Remote Code Execution Vulnerability

...

CVE-2021-0386

In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-17342111...

CVE-1999-0386

Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL...

PT-2025-50300

Name of the Vulnerable Software and Affected Versions Windows Deployment Services versions prior to January 2026 updates Windows Server 2016 versions prior to KB5034651 Windows Server 2019 versions prior to KB5034650 Windows Server 2022 versions prior to KB5034129 Description An improper access...

K000152448: Linux kernel vulnerability CVE-2023-0386

Security Advisory Description A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug...

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabilities KEV catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2023-0386 CVSS score: 7.8, is an improper...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2023-0386link is external Linux Kernel Improper Ownership Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

CVE-2020-0386

In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege allowing an attacker to set Bluetooth discoverability with User execution privileges needed. User interaction is needed for...