68 matches found
linux-4.19.72_CVE-2023-0386
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
CVE-2023-0386-libs
Install compilation environment sudo apt install -y gcc libfuse-dev pkg-config Compile exploit gcc -Wall CVE-2023-0386.c pkg-config fuse --cflags --libs -DFILEOFFSETBITS=64 -o CVE-2023-0386-exp -static -lfuse Generate shellcode msfvenom -p linux/x86/exec CMD=/bin/sh PrependSetuid=True -f elf -o...
CVE-2023-0386
Installation make all How to use Start two terminals and in the first one type ./fuse ./ovlcap/lower ./gc In the second terminal type ./exp...
CVE-2023-0386
Installation make all How to use Start two terminals and in the first one type ./fuse ./ovlcap/lower ./gc In the second terminal type ./exp...
CVE-2023-0386-CTF
This repository does not have a README...
cve-2023-0386
This repository does not have a README...
CVE-2023-0386-go-poc
Go PoC of CVE-2023-0386 ./main /tmp/fuse Will run the program and create a fuse mount on "/tmp/fuse" directory. Expects you've compiled the shell in the root directory with a name of "shell" by default. After you've run the program, there should be an executable binary in the "/tmp/ovlmerged/"...
CVE-2023-0386
CVE-2023-0386...
TwoMillion-Machine-Writeup
About Machine TwoMillion is an Easy difficulty Linux box that was released to celebrate reaching 2 million users on HackTheBox. The box features an old version of the HackTheBox platform that includes the old hackable invite code. After hacking the invite code an account can be created on the...
HTB-TwoMillion-Writeup
HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...
CVE-2023-0386
CVE-2023-0386 gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp...
CVE-2023-0386
Compilation make all Usage Start two terminals, in the first terminal enter ./fuse ./ovlcap/lower ./gc In the second terminal enter ./exp Effect Privilege escalation effect Effect demonstration...
CVE-2023-0386
CVE-2023-0386 WIP...
Exploit for Improper Ownership Management in Debian Debian_Linux
HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup —...
K000152448: Linux kernel vulnerability CVE-2023-0386
Security Advisory Description A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug...
CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabilities KEV catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2023-0386 CVSS score: 7.8, is an improper...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2023-0386link is external Linux Kernel Improper Ownership Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...
Linux OverlayFS Local Privilege Escalation Exploit
This Metasploit module exploit targets the Linux kernel bug in OverlayFS. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mou...
