312 matches found
Ubuntu-GameOver-Lay
UbuntuP-GameOverLay Using CVE-2023-2640 CVE-2023-3262 to escalate previlege CVE 2023-2640 https://nvd.nist.gov/vuln/detail/CVE-2023-2640 On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may se...
CVE-2023-2640-3262-PoC
CVE-2023-2640/3262-PoC Minimal PoCs for Ubuntu OverlayFS local privilege escalation vulnerabilities. CVEs CVE-2023-2640 – OverlayFS permission handling issue CVE-2023-3262 – OverlayFS capability escalation issue Files CVE-2023-2640.sh – basic OverlayFS behavior test CVE-2023-3262.sh – capability...
CVE-2023-2640-CVE-2023-32629-Interactive-PoC
CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root Escape PoC An interactive, multi-step Local Privilege Escalation LPE Proof of Concept PoC targeting the Ubuntu Linux kernel OverlayFS vulnerabilities CVE-2023-2640 / CVE-2023-32629. Unlike standard automated one-liners that trap your...
GameOverlayFS
This script exploit the CVE-2023-2640 and CVE-2023-32629 for vulnerability on OverlayFS that affected some versions of Ubuntu. Tested on Ubuntu 20.04 with kernel 5.4.0. How to Use Download the file Gameoverlay.sh and, using a regular user not root, change the permissions for execution: chmod +x...
CVE-2023-32629-CVE-2023-2640---POC-Escalation
CVE-2023-32629 & CVE-2023-2640 : Privilege escalation Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640. TOTALLY STOLE IT FROM https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 PLEASE RETWEET THE ORIGINAL SOURCE I just wanted to...
CVE-2023-2640-CVE-2023-32629
This repository does not have a README...
CVE-2023-32629-CVE-2023-2640-Ubuntu-Privilege-Escalation-POC
CVE-2023-32629-CVE-2023-2640-Ubuntu-Privilege-Escalation-POC CVE-2023-32629 & CVE-2023-2640 Ubuntu Privilege Escalation POC...
CVE-2023-2640-CVE-2023-32629
CVE-2023-2640-CVE-2023-32629 gameoverLAY Priv Esc -CVE-2023-32629- https://www.cvedetails.com/cve/CVE-2023-32629/ -CVE-2023-2640- https://www.cvedetails.com/cve/CVE-2023-2640/ USAGE: chmod +x gameoverLAY.sh ./gameoverLAY.sh...
CVE-2023-2640-CVE-2023-32629
CVE-2023-2640-CVE-2023-32629...
PHP-CVE-2023-2023-2640-POC-Escalation
I am not responsible if you use the code improperly or illegally. The purpose of the script is purely educational and nothing more. PHP-CVE-2023-2023-2640-POC-Escalation in this script in PHP I tried to create exploit of --cve-2023-2640--privilege-escalation CVE-2023-32629 & CVE-2023-2640...
Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8297-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8297-1 advisory. Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission chec...
USN-8255-1 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle, linux-realtime vulnerabilities
Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. CVE-2023-2640 Shir Tamari and Sagi Tzadik...
Exploit for Incorrect Authorization in Canonical Ubuntu_Linux
CVE-2023-2640/3262-PoC Minimal PoCs for Ubuntu OverlayFS loca...
CVE-2026-2640
During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes...
MiracleLinux 7 : rh-mysql56-mysql-5.6.39-1.el7.1 (AXSA:2018-2639:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2639:01 advisory. mysql: sha256password authentication DoS via long password CVE-2018-2696 mysql: Server : Partition unspecified vulnerability CPU Jan 2018...
MiracleLinux 7 : pidgin-2.10.11-5.el7 (AXSA:2017-1913:01)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1913:01 advisory. Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell...
MiracleLinux 4 : rh-mysql56-mysql-5.6.39-1.AXS4.1 (AXSA:2018-2638:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2638:01 advisory. mysql: sha256password authentication DoS via long password CVE-2018-2696 mysql: Server : Partition unspecified vulnerability CPU Jan 2018...
EUVD-2026-2640
EUVD-2026-2640...