winfsp

WinFsp · Proxy de Sistema de Archivos de Windows WinFsp permite a los desarrolladores escribir sus propios sistemas de archivos es decir, "unidades de Windows" como programas en modo usuario, sin necesidad de conocimientos de programación del kernel de Windows. Es similar a FUSE Filesystem in...

CVE-2023-0386

README gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable Product: Linux kern...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Uso del exploit: Primero : Subir fuse.c y exp.sh al directorio /tmp. Puedes usar scp o python3 -m http.server para subir el archivo al objetivo. scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp /Desktop/CVE-2023-0386/fuse.c...

CVE-2021-33909

CVE-2021-33909 Secuoya Informe gcc exploit.c -o exploit -lpthread -DBLOCKVIAUSERFAULTFD gcc exploit.hello.c -o exploit.hello -lpthread -lfuse -DFILEOFFSETBITS=64 $ mkdir dir $ ./exploit $pwd/dir id...

FUSE

FUSE FUSE es un sistema de pruebas de penetración diseñado para identificar vulnerabilidades de subida de archivos ejecutables no restringidos UEFU. Los detalles de la estrategia de prueba se encuentran en nuestro artículo, "FUSE: Finding File Upload Bugs via Penetration Testing", presentado en...

CVE-2026-Termius

Termius macOS Application Vulnerability Report CVE-2026-Termius Target : Termius macOS Version Tested : Latest as of Jan 2026 Impact : Remote Code Execution RCE, Local Privilege Escalation LPE, App Security Bypass 🚨 Executive Summary Three critical vulnerabilities were identified in the Termius...

CVE-2023-0386

CVE-2023-0386 gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp...

CVE-2023-0386

Compilación make all Uso Abra dos terminales, en la primera terminal ingrese ./fuse ./ovlcap/lower ./gc En la segunda terminal ingrese ./exp Efecto Efecto de escalada de privilegios Mostrar efecto...

CVE-2022-1011

CVE-2022-1011 Fix link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 This vulnerability is mainly due to the asynchronous nature of splice, which allows the user-mode filesystem process server side to retain a piece of memor...

libewf

libewf は、Expert Witness Compression Format EWF にアクセスするためのライブラリです。 プロジェクト情報: 状態: 実験的 ライセンス: LGPL-3.0-or-later 読み書き対応のEWF形式: SMART .s01 EWF-S01 EnCase .E01 EWF-E01 .Ex01 EWF2-Ex01 未対応: .Ex01 EWF2-Ex01 bzip2 圧縮（作業中） .Ex01 EWF2-Ex01 暗号化 読み取り専用対応のEWF形式: Logical Evidence File LEF .L01 EWF-L01 .Lx01...

CVE-2022-0185

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185. There are two versions here. The non-kctf version fuse version specifically targets Ubuntu with kernel version 5.11.0-44. It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege...

CVE-2026-80856

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. A local user could trigger a lock leak within the fusedosetattr function during a Direct Access DAX truncate operation. If a writeback flush fails, a critical lock is not properly released, causing subsequent file...

CVE-2026-80855

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. A local user could exploit this by opening a file with the OTRUNC flag, which attempts to truncate the file. If a signal interrupts the Direct Access DAX page invalidation process during this operation, a lock can be...

CVE-2023-0386-libs

컴파일 환경 설치 sudo apt install -y gcc libfuse-dev pkg-config exp 컴파일 gcc -Wall CVE-2023-0386.c pkg-config fuse --cflags --libs -DFILEOFFSETBITS=64 -o CVE-2023-0386-exp -static -lfuse shellcode 생성 msfvenom -p linux/x86/exec CMD=/bin/sh PrependSetuid=True -f elf -o shellcode.elf && xxd -i -c 8...

CVE-2026-98215

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...

CVE-2026-98215 selinux: preserve user SID across nested backing files

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...

CVE-2026-98215

The Linux kernel contains a vulnerability in SELinux related to how user file SIDs are preserved across nested backing files, such as overlayfs over overlayfs or FUSE passthrough . When mmap() replaces vma->vm_file with a backing file, the system may incorrectly use the SID of the mounter inst...

CVE-2023-0386

Instalación make all Cómo usar Inicie dos terminales y en la primera escriba ./fuse ./ovlcap/lower ./gc En la segunda terminal escriba ./exp...

CVE-2026-31694-POC

CVE-2026-31694: Desbordamiento de escritura en caché de readdir de FUSE Una verificación de límites faltante en fs/fuse/readdir.c:fuseadddirenttocache. Un servidor FUSE devuelve una entrada de directorio con namelen = 4095, que se serializa en un registro de 4120 bytes. El kernel lo copia en una...

CVE-2026-48711

A flaw was found in SSHFS, a network filesystem client. An attacker can exploit this vulnerability by providing a specially crafted mount source that includes argument delimiters. This improper handling of the mount source allows for argument injection, leading to the execution of arbitrary...