101 matches found
uptux
uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...
CVE-2023-4911
CVE-2023-4911 이것은 Looney Tunables Linux 권한 상승 취약점에 대한 PoC개념 증명입니다. 이 PoC를 기반으로 합니다. leesh3288에게 큰 감사를 드립니다. 여기에서 매우 상세한 분석 문서를 찾을 수 있으며, 여기에서 IppSec의 아주 멋진 동영상을 볼 수 있습니다. 사용법 취약한지 확인하기 root@kitploit: env -i "GLIBCTUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=printf '%08192x' 1" /usr/bin/...
bx2-writeups
Writeups de Segurança Uma coleção dos meus writeups de segurança cibernética cobrindo: TryHackMe Hack The Box Escalação de Privilégios no Linux Segurança de IA e Infraestrutura CTFs Desafios de Segurança Autor: Nanashi Bx2...
thm-cybersec-portfolio
Appunti TryHackMe — Portfolio di Cybersecurity Appunti personali e riassunti delle room TryHackMe completate. Creato come riferimento di studio e portfolio per ruoli di sicurezza IT. Room Completate | Room| Argomento ---|---|--- 01| Linux Privilege Escalation| Tecniche di privesc su Linux 02| Sud...
python3-ansible-compat-26.8.0-1.1 on GA media (moderate)
python3-ansible-compat-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11509-1 Rating: moderate Cross-References: CVE-2026-11332 CVSS scores: CVE-2026-11332 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one...
Security update for python-sh (important)
openSUSE security update: security update for python-sh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21516-1 Rating: important References: bsc1272424 Cross-References: CVE-2026-54552 CVSS scores: CVE-2026-54552 SUSE : 8.2...
dirtyfrag
Dirty Frag: Universal Linux LPE Abstract !tuxasse...
linux-privesc-linpeas
🐧 linux-privesc-linpeas End-to-end Linux privilege escalati...
Post_Exploitation_Privilege_Escalation
⬆️ Week 05 — Post-Exploitation & Privilege Escalation Inter...
Post_Exploitation_Privilege_Escalation
⬆️ Week 05 — Post-Exploitation & Privilege Escalation Inter...
Linux-privesc-PoC
Linux Privilege Escalation PoC Lab Educational disclaimer...
Metasploit Wrap Up 05/29/2026
More Linux LPEs Hark the age of the Linux LPE has arrived. This week’s release follows up on recent work bringing new Linux LPEs to Metasploit users. Copy Fail seemed to have kicked off a trend of similar bugs and hot on its heels is Dirty Frag. Dirty Frag is actually two vulnerabilities in a...
Important: kernel-livepatch-6.12.79-101.147
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.12.79-101.147 Issue Correction: Please ensure you have live patching enabled. Run dnf update...
Important: kernel-livepatch-5.10.251-248.983
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-5.10.251-248.983 Issue Correction: Please ensure you have live patching enabled. Run yum update...
Important: kernel-livepatch-6.1.163-186.299
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.1.163-186.299 Issue Correction: Please ensure you have live patching enabled. Run dnf update...
Important: kernel-livepatch-6.1.170-213.321
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.1.170-213.321 Issue Correction: Please ensure you have live patching enabled. Run dnf update...
CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
Active attack: Dirty Frag Linux vulnerability expands post-compromise risk
In this article 1. Why Dirty Frag matters 2. Technical overview 3. Exploitation scenarios 4. Mitigation guidance 5. Post-mitigation integrity verification 6. References A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unprivileged...
Active attack: Dirty Frag Linux vulnerability expands post-compromise risk
In this article 1. Why Dirty Frag matters 2. Technical overview 3. Exploitation scenarios 4. Mitigation guidance 5. Post-mitigation integrity verification 6. References A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unprivileged...