CVE-2024-48990-Exploit

CVE-2024-48990 漏洞利用 关于我如何重新发现这个 N-day 漏洞并创建自己的利用工具的完整文章，可在我的博客上找到。 基本上，你可以将本仓库 git clone 到一个攻击者控制的目录，执行 export PYTHONPATH=，然后在设置好该 PYTHONPATH 值的情况下运行 main.py。接着，在 127.0.0.1:1337 上设置一个 netcat 监听器，等待 cron 任务或系统管理员在系统上执行 sudo apt install，即可在监听器中看到 root shell。...

CVE-2024-48990-PoC-Testing

CVE-2024-48990-PoC-Testing 🐍🔓 该仓库包含一个概念验证 PoC ，用于演示needrestart程序中的一个漏洞，该程序未能正确设置Python路径，可能导致权限提升。该PoC突显了通过利用此缺陷获取提升权限的潜在途径。 ⚠️ 漏洞概述 CVE-2024-48990 漏洞存在于 needrestart 包中。具体来说，它未能正确设置 Python 路径，在特定操作触发时可被利用来提升权限。 该 PoC 模拟了一个场景：通过 Python 加载恶意共享库，操纵系统设置并获取提升的权限。请仅在受控、安全的环境中进行测试。 要检查你是否易受攻击，请运行：...

CVE-2024-48990

This repository does not have a README...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-48990-PoC What is needrestart and how does it wor...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-4...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploi...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-48990 - Needrestart 3.7-3 Privilege Escalation Exploi...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-48990 introdution This vulnerability takes advant...

CLSA-2024-1734028058 Fix CVE(s): CVE-2024-11003, CVE-2024-48990, CVE-2024-48991, CVE-2024-48992

SECURITY UPDATE: Prevent running the Python interpreter with an attacker-controlled PYTHONPATH environment variable - debian/patches/CVE-2024-48990-CVE-2024-48991.patch: do not set PYTHONPATH environment variable to prevent a LPE and prevent race condition on /proc/$PID/exec evaluation -...

Ubuntu: Security Advisory (USN-7117-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-48990 Exploit My full writeup for how I came to re-...

Fedora 39 : needrestart (2024-6015ee69f0)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6015ee69f0 advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora: Security Advisory (FEDORA-2024-d2124788a8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : needrestart (2024-a9cf3dad4f)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a9cf3dad4f advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

needrestart Local Privilege Escalation Vulnerability

LPEs in needrestart CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 ======================================================================== Contents ======================================================================== Summary Background CVE-2024-48990 and...

needrestart Local Privilege Escalation

Qualys Security Advisory LPEs in needrestart CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 ======================================================================== Contents ======================================================================== Summary...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-48990 Exploit for CVE-2024-48990 Local Privilege Esc...

CVE-2024-48990

creationtimestamp| type| source ---|---|--- 2024-11-20 18:45:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9102 2024-11-21 13:05:05+00:00| seen| https://t.me/truesecator/6456 2024-11-22 00:03:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9121 2024-11-22...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

PoC for CVE-2024-48990 in needrestart educational purpose...

Ubuntu: Security Advisory (USN-7117-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...