17 matches found
below-log-race-poc
below-log-race-poc CVE-2025-27591 漏洞利用 Below 权限提升 描述 此仓库包含 CVE-2025-27591 的概念验证漏洞利用代码，该漏洞是 below 实用工具中的一个权限提升漏洞。 问题源于 below 不当处理 /var/log/below/ 下的日志文件，允许攻击者用符号链接替换日志，指向诸如 /etc/passwd 之类的敏感文件。 通过利用这一点，非特权用户可以注入一个新的 root 用户条目并提升权限。 漏洞利用脚本 该漏洞利用实现为一个简单的 Bash 脚本 exploitCVE-2025-27591.sh，其功能如下： 1...
Linux-Privilege-Escalation-CVE-2025-27591
CVE-2025-27591 - 通过 below 中的可写符号链接进行权限提升 概述 这是针对 CVE-2025-27591 的一个简单漏洞利用程序，该漏洞是 below Linux 系统监控工具中的一个本地权限提升漏洞。该漏洞影响 v0.9.0 之前的版本，根源在于系统中不正确的权限分配。该问题于 2025 年 1 月被发现，并于 2025 年 3 月 12 日公开披露（SecurityOnline、OpenWall）。当 below 通过 sudo 运行时，它可能会将错误日志写入一个全局可写目录（/var/log/below），从而使攻击者能够将日志文件符号链接到敏感目标（如...
CVE-2025-27591_PoC
概念验证 使用方法 1. 构建 root@kitploit: go build -o poc exploit.go 2. 将二进制文件移动到目标机器 https://github.com/user-attachments/assets/d5e3f8e7-ba05-42f8-a533-21179cd77177 参考 https://nvd.nist.gov/vuln/detail/CVE-2025-27591 https://access.redhat.com/security/cve/cve-2025-27591...
CVE-2025-27591
Below - 本地权限提升 CVE-2025-27591 Below .log 符号链接到任何 root 拥有的文件，例如 /etc/passwd。 当使用 sudo 执行 below snapshot 时，它会强制将日志文件的模式设置为 0666 并写入其中——即使它是一个符号链接。 这允许注入一个无密码的 root 特权用户，从而导致获得完全的 root shell 访问权限。 使用方法 root@kitploit: git clone https://github.com/rvizx/CVE-2025-27591 cd CVE-2025-27591 chmod +x...
📄 Below Log File Symlink Privilege Escalation
This Metasploit module exploits a local privilege escalation vulnerability in the below utility when executed with sudo. This affects versions prior to 0.9.0. ================================================================================================================================== | Title...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591 — Meta below Symlink Local Privilege Escalati...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591 Below v0.9.0 PoC Privilege Escalation Expl...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591 – Privilege Escalation via Symlink Abuse in be...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591 – Privilege Escalation via Symlink Abuse in be...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
Proof-Of-Concept Usage 1. build bash go build -o poc e...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591 - Privilege Escalation via Writable Symlink in...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
Below - Local Privilege Escalation CVE-2025-27591 B...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591 - Privilege Escalation via below This reposi...
CVE-2025-27591
creationtimestamp| type| source ---|---|--- 2025-03-11 21:48:55+00:00| seen| https://t.me/cvedetector/20126 2025-03-12 12:00:41+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lk6ju6fw642e 2025-03-12 12:09:31+00:00| seen|...
CVE-2025-27591
A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...
CVE-2025-27591
A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...
CVE-2025-27591
A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow...