Lucene search
+L

3974 matches found

Kitploit
Kitploit
added 2026/09/17 3:04 a.m.20 views

mofos

mofos Concept Installation Configure the host QEMU/KVM system session Security considerations Mofos configuration Install a template Configure the firewall Install Import Create the upper layer empty disk Create a virtual machine Customization Template - hook install Virtual machine - hook new...

6.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 12:01 a.m.8 views

CVE-2020-25637-libvirt-double-free

root@kitploit: CVE-2020-25637 root@kitploit: Description A double-free issue occurred in the libvirt API, in versions prior to version 6.8.0, responsible for requesting information about the network interfaces of a running QEMU domain. This flaw affects the polkit access control driver...

7.2CVSS6.8AI score0.00529EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 6:14 p.m.13 views

specterops-k8s-red-teamers-libvirt-patch

SpecterOps Kubernetes for Red Teamers Libvirt Patch An unofficial libvirt and QEMU/KVM patch for the free SpecterOps Kubernetes for Red Teamers course. The original network addresses, Kubernetes topology, Mythic callbacks and lab behaviour remain unchanged. Why? Because running VirtualBox on Linu...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 3:52 p.m.11 views

see

Entorno de Ejecución en Aislamiento :Fuente: https://github.com/F-Secure/see :Documentación: https://see.readthedocs.io :Descarga: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 9:17 a.m.60 views

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 9:17 a.m.9 views

ad-honeypot-autodeploy

ad-honeypot-autodeploy Despliega un pequeño dominio de Windows, intencionadamente inseguro y vulnerable, para un RDP Honeypot de forma totalmente automática. Se ejecuta en virtualización autogestionada usando libvirt con QEMU/KVM pero se puede personalizar fácilmente para soluciones basadas en la...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 12:17 a.m.8 views

libvirt-CVE-2014-1447

This repository does not have a README...

3.3CVSS7.1AI score0.02343EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 12:12 p.m.8 views

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — libvirt vulnerability reproduction environment This repository is a snapshot of the reproducible vulnerability environment for CVE-2021-3975 libvirt qemuProcessHandleMonitorEOF use-after-free, CWE-416, exported from the corresponding container image yan5ui/cve-2021-3975:tier1...

6.5CVSS7.6AI score0.01538EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/14 4:34 p.m.12 views

OESA-2026-3832 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...

7.8CVSS6.2AI score0.00163EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.8 views

Astra Linux – Vulnerability in libvirt

A NULL pointer dereference was detected in the libvirt API, which was introduced in the upstream version 3.10.0 and fixed in libvirt 6.0.0. This issue relates to the retrieval of a storage pool based on its target path. More specifically, this flaw affects storage pools created without a target...

6.5CVSS6.8AI score0.02363EPSS
SaveExploits1References2
SUSE Linux
SUSE Linux
added 2026/09/14 7:59 a.m.8 views

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. CVE-2026-63622...

8.5CVSS6.2AI score0.00163EPSS
SaveExploits0References20
Amazon
Amazon
added 2026/09/14 12:00 a.m.6 views

Important: libvirt

Issue Overview: A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can...

7.8CVSS6AI score0.0016EPSS
SaveExploits0
Amazon
Amazon
added 2026/09/14 12:00 a.m.6 views

Important: libvirt

Issue Overview: A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can...

7.8CVSS6.1AI score0.0016EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/09/11 11:52 p.m.10 views

CVE-2026-18917 affecting package libvirt for versions less than 11.9.0-1

CVE-2026-18917 affecting package libvirt for versions less than 11.9.0-1. A patched version of the package is available...

7.8CVSS5.7AI score0.0016EPSS
SaveExploits0
NVD
NVD
added 2026/09/11 11:16 a.m.8 views

CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS0.00162EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/11 11:16 a.m.9 views

DEBIAN-CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/09/11 11:16 a.m.6 views

CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 11:16 a.m.4 views

UBUNTU-CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 10:32 a.m.40 views

CVE-2026-77159 Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS0.00162EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/09/11 10:32 a.m.11 views

CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0
Rows per page
Query Builder