24 matches found
CVE-2024-48990-Exploit
CVE-2024-48990 Exploit Mi artículo completo sobre cómo llegué a redescubrir este N-day y a crear mi propio exploit para él se puede encontrar en mi blog. Básicamente, puedes git clone este repositorio en un directorio controlado por el atacante, export PYTHONPATH=, y luego ejecutar main.py con es...
CVE-2024-48990-PoC-Testing
CVE-2024-48990-PoC-Testing 🐍🔓 This repository contains a Proof of Concept PoC to demonstrate a vulnerability in theneedrestart program, which fails to set Python's path correctly, leading to potential privilege escalation. The PoC highlights a potential path for gaining elevated privileges by...
CVE-2024-48990
Este repositorio no tiene un README...
npm_poisoning_poc
Guardians 2027 AI package lab Reusable setup for the first Gu...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990-PoC What is needrestart and how does it wor...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-4...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploi...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 - Needrestart 3.7-3 Privilege Escalation Exploi...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 introdution This vulnerability takes advant...
CLSA-2024-1734028058 Fix CVE(s): CVE-2024-11003, CVE-2024-48990, CVE-2024-48991, CVE-2024-48992
SECURITY UPDATE: Prevent running the Python interpreter with an attacker-controlled PYTHONPATH environment variable - debian/patches/CVE-2024-48990-CVE-2024-48991.patch: do not set PYTHONPATH environment variable to prevent a LPE and prevent race condition on /proc/$PID/exec evaluation -...
Ubuntu: Security Advisory (USN-7117-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 Exploit My full writeup for how I came to re-...
Fedora 39 : needrestart (2024-6015ee69f0)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6015ee69f0 advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Fedora 41 : needrestart (2024-a9cf3dad4f)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a9cf3dad4f advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Fedora: Security Advisory (FEDORA-2024-d2124788a8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
needrestart Local Privilege Escalation Vulnerability
LPEs in needrestart CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 ======================================================================== Contents ======================================================================== Summary Background CVE-2024-48990 and...
needrestart Local Privilege Escalation
Qualys Security Advisory LPEs in needrestart CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 ======================================================================== Contents ======================================================================== Summary...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 Exploit for CVE-2024-48990 Local Privilege Esc...
CVE-2024-48990
creationtimestamp| type| source ---|---|--- 2024-11-20 18:45:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9102 2024-11-21 13:05:05+00:00| seen| https://t.me/truesecator/6456 2024-11-22 00:03:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9121 2024-11-22...