winfsp

WinFsp · Proxy de Sistema de Archivos de Windows WinFsp permite a los desarrolladores escribir sus propios sistemas de archivos es decir, "unidades de Windows" como programas en modo usuario, sin necesidad de conocimientos de programación del kernel de Windows. Es similar a FUSE Filesystem in...

CVE-2021-33909

CVE-2021-33909 Secuoya Informe root@kitploit: gcc exploit.c -o exploit -lpthread -DBLOCKVIAUSERFAULTFD gcc exploit.hello.c -o exploit.hello -lpthread -lfuse -DFILEOFFSETBITS=64 root@kitploit: $ mkdir dir $ ./exploit $pwd/dir id...

FUSE

FUSE FUSE es un sistema de pruebas de penetración diseñado para identificar vulnerabilidades de subida de archivos ejecutables no restringidos UEFU. Los detalles de la estrategia de prueba se encuentran en nuestro artículo, "FUSE: Finding File Upload Bugs via Penetration Testing", presentado en...

libewf

libewf es una biblioteca para acceder al Expert Witness Compression Format EWF. Información del proyecto: Estado: experimental Licencia: LGPL-3.0-or-later Formatos EWF compatibles de lectura o escritura: SMART .s01 EWF-S01 EnCase .E01 EWF-E01 .Ex01 EWF2-Ex01 No compatibles: .Ex01 EWF2-Ex01...

CVE-2023-0386

README root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable...

CVE-2023-0386

Instalación root@kitploit: make all Cómo usar Inicie dos terminales y en la primera escriba root@kitploit: ./fuse ./ovlcap/lower ./gc En la segunda terminal escriba root@kitploit: ./exp...

CVE-2022-0185

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185. There are two versions here. The non-kctf version fuse version specifically targets Ubuntu with kernel version 5.11.0-44. It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Uso del exploit: Primero : Subir fuse.c y exp.sh al directorio /tmp. Puedes usar scp o python3 -m http.server para subir el archivo al objetivo. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp...

EUVD-2026-81732

In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in fusefillsupersubmount fuseiget can return NULL when its inode allocation fails, but fusefillsupersubmount passed the result straight to getfuseinode and decremented fi-nlookup without checking i...

CVE-2026-90096

CVE-2026-90096 affects the Linux kernel FUSE subsystem. In fuse_direct_write_iter(), the variable pos is captured before generic_write_checks(), which moves ki_pos to EOF for O_APPEND direct writes. The post-write page invalidation then targets a stale range [0, res) instead of the actual written...

CVE-2026-Termius

Termius macOS Application Vulnerability Report CVE-2026-Termius Target : Termius macOS Version Tested : Latest as of Jan 2026 Impact : Remote Code Execution RCE, Local Privilege Escalation LPE, App Security Bypass 🚨 Executive Summary Three critical vulnerabilities were identified in the Termius...

CVE-2023-0386

CVE-2023-0386 root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp...

CVE-2023-0386-libs

Install compilation environment root@kitploit: sudo apt install -y gcc libfuse-dev pkg-config Compile exploit root@kitploit: gcc -Wall CVE-2023-0386.c pkg-config fuse --cflags --libs -DFILEOFFSETBITS=64 -o CVE-2023-0386-exp -static -lfuse Generate shellcode root@kitploit: msfvenom -p linux/x86/ex...

CVE-2023-0386

Compilación root@kitploit: make all Uso Abra dos terminales, en la primera terminal ingrese root@kitploit: ./fuse ./ovlcap/lower ./gc En la segunda terminal ingrese root@kitploit: ./exp Efecto Efecto de escalada de privilegios Mostrar efecto...

CVE-2022-1011

CVE-2022-1011 Fix link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 This vulnerability is mainly due to the asynchronous nature of splice, which allows the user-mode filesystem process server side to retain a piece of memor...

CVE-2026-31694-POC

CVE-2026-31694: Desbordamiento de escritura en caché de readdir de FUSE Una verificación de límites faltante en fs/fuse/readdir.c:fuseadddirenttocache. Un servidor FUSE devuelve una entrada de directorio con namelen = 4095, que se serializa en un registro de 4120 bytes. El kernel lo copia en una...

CVE-2023-0386

Instalación root@kitploit: make all Cómo usar Abra dos terminales y en la primera escriba root@kitploit: ./fuse ./ovlcap/lower ./gc En la segunda terminal escriba root@kitploit: ./exp...

CVE-2022-0185

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185. There are two versions here. The non-kctf version fuse version specifically targets Ubuntu with kernel version 5.11.0-44. It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege...

Astra Linux – Vulnerability in glusterfs

In Gluster GlusterFS 11.0, there is a stack-based buffer over-read issue in xlators/mount/fuse/src/fuse-bridge.c...

Astra Linux – Vulnerability in ntfs-3g

An invalid return code in fusekernmount allows for intercepting the libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...