copyfail2_electric_boogaloo_fix

copyfail2electricboogaloofix Uma mitigação temporária contra a variante copyfail copyfail2electricboogaloo - LPE Linux não privilegiada via caminho rápido no-COW MSGSPLICEPAGES do xfrm ESP-in-UDP. Escrita no cache de página em qualquer arquivo legível. Substitui uma linha nologin em /etc/passwd c...

dirtyfrag

Dirty Frag: تصعيد امتيازات محلي شامل لأنظمة لينكس الملخص توثّق هذه الوثيقة فئة الثغرات Dirty Frag، التي اكتشفها وأبلغ عنها لأول مرة Hyunwoo Kim @v4bel، والتي يمكنها الحصول على صلاحيات الجذر على توزيعات لينكس الرئيسية من خلال ربط ثغرة xfrm-ESP Page-Cache Write CVE-2026-43284 وثغرة RxRPC Page-Cache...

Metasploit Wrap Up: Lot of summer shells and fit http profiles

This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to...

Metasploit Weekly Wrap-Up

Metasploit 6.3 is out! Earlier this week we announced the release of Metasploit 6.3 which came with a tonne of new modules and improvements. The whole team worked super hard on this and we're very excited that everyone can now get their hands on it and all of the new features it has to offer! I...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Podman_Project Podman

CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust...