CVE-2024-21626-runcPOC

Воспроизведение уязвимости CVE-2024-21626 уязвимость побега из контейнера docker runc 1. Обзор уязвимости Имя уязвимости| Уязвимость побега из контейнера docker runc ---|--- Номер уязвимости| CVE-2024-21626 Дата раскрытия| 2024-01-31 Характеристика| / Затронутые версии| runc @ v1.0.0-rc93,1.1.11...

CVE-2022-2602-Kernel-Exploit

CVE-2022-2602-Kernel-Exploit Dettagli https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-iouring-uaf/ TL;DR La vulnerabilità è una Use-After-Free che interessa la funzionalità di descrittore di file registrato nel sottosistema iouring. È...

cve-2024-21626

CVE-2024-21626 Panoramica Questo repository contiene esempi di codice per un'app vulnerabile a CVE-2024-21626 e un gadget eBPF per rilevare i tentativi di sfruttamento. Questo repository è stato creato come parte di questo post del blog. Il programma gadget usato per rilevare questa vulnerabilità...

CVE-2026-77037

multer is a Node.js middleware for handling multipart/form-data uploads. In version 2.2.0 , when a disk-backed upload is aborted or truncated before the write stream finishes, the disk storage engine removes the visible file but fails to close the underlying write file descriptor , leaving a dele...

fastjson-jsontype-rce-lab

Lab di rilevamento e riproduzione @JSONType remote-JAR/FD-chain di Fastjson Questo repository conserva ora due distinte linee di ricerca su Fastjson: modern-fd/ è la ricostruzione consigliata, solo-marker , della catena remote-JAR/file-descriptor in un singolo corpo di richiesta di Fastjson 1.2.8...

CVE-2024-21626-PoC

CVE-2024-21626 Root-Ursache & Proof-of-Code Wie verwendet man poc-autoplay? root@kitploit: make install make uninstall 1. Root-Ursache In runc v1.1.11 und niedriger entsteht diese Schwachstelle dadurch, dass beim Öffnen des Host-Verzeichnisses /sys/fs/cgroup zur Einrichtung der cgroup der...

CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

EUVD-2026-67658

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

CVE-2026-33263

This vulnerability affects the submission-login process in OX Dovecot. When the mail_max_userip_connections limit (default 10) is reached, an epoll() panic triggered by file descriptor handling issues can crash the process. In high-security mode (default for community releases), only the new conn...

CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

CVE-2025-1974

Exploit per Ingress NGINX - IngressNightmare Questo progetto fornisce un exploit mirato a vulnerabilità critiche di esecuzione remota di codice RCE non autenticata nel controller Ingress NGINX per Kubernetes, note collettivamente come IngressNightmare. Nella ricerca originale, il team di Wiz non ...

CVE-2024-21626-POC

CVE-2024-21626-POC 使用說明 教育・研究目的のみに使用してください。教育・研究に関係のない行為によって生じたリスクは自己責任となります 使用 root@kitploit: docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal /bin/bash.copy 注意 docker/runcのバージョンによって使用される具体的なファイルディスクリプタは異なります。例えば、docker server:20.10.17 && runc version...

docker_lightman_exploit

Docker Lightman Exploit Docker CVE-2022-37708. Questo exploit si basa su come il filesystem UNIX gestisce UID e GID sui file che Docker condivide tra l'Host che esegue Docker e il Client eseguito all'interno di Docker, e si basa anche sulla natura di come funziona la proprietà degli ID di process...

ptrace_may_dream

ptracemaydream CVE-2026-46333 Exploit di escalation dei privilegi locale per la condizione di race mm=NULL in ptracemayaccess in pidfdgetfd2. Quando un processo sta morendo e la sua mm è già stata rilasciata, il kernel salta completamente il controllo di accesso ptrace. Mettendo in competizione...

CVE-2024-21626-old-docker-versions

Containeraustritt-Schwachstelle in alten runc-Komponenten CVE-2024-21626 Während meiner Analyse zu CVE-2024-21626 habe ich festgestellt, dass andere ältere Docker-Komponenten anfällig für fd-Leaks sind was in der Sicherheitswarnung GHSA-xr7r-f8xq-vfvv nicht erwähnt wird. Lesen Sie meinen...

cve-2024-21626-runc-1.1.11-escape

CVE-2024-21626 - runc Vasi che perdono Panoramica Campo| Dettaglio ---|--- CVE| CVE-2024-21626 Componente affetto| runc ≤ 1.1.11 Classe di vulnerabilità| Fuga dal contenitore tramite perdita di file descriptor Soprannome| Vasi che perdono Causa principale runc perde un file descriptor interno...

CVE-2024-21626-POC

CVE-2024-21626-POC Istruzioni per l'uso Solo per uso educativo/di ricerca. Qualsiasi azione non correlata a scopi educativi/di ricerca è a proprio rischio. Utilizzo root@kitploit: docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal /bin/bash.copy Nota I...

Wasmtime has a leak in WASIp1 `fd_renumber` implementation

Impact Wasmtime's native implementation of WASIp1 suffers from a leak in the fdrenumber function where the file descriptor being renumbered to is not properly closed. Wasmtime's implementation erroneously only updated the table of descriptors for WASIp1 and didn't update the underlying table of...

CVE-2026-73102 RustDesk Path Traversal via macOS Clipboard File-Paste

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...