548477 matches found
CVE-2019-2215
CVE-2019-2215 Fuente: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885 Samsung S7 y S7 Edge con Kernel 3.18.x parecen no ser vulnerables podrían serlo, sin embargo, con más trabajo y ajustes en el PoC. No se...
meltdown
Meltdown Proof-of-Concept This repository contains several applications, demonstrating the Meltdown bug. For technical information about the bug, refer to the paper: Meltdown by Lipp, Schwarz, Gruss, Prescher, Haas, Mangard, Kocher, Genkin, Yarom, and Hamburg The applications in this repository a...
sudotimewarp-cve-2026-96512-
SudoTimeWarp — CVE-2026-96512 sudo: the caller'sTZ decides NOTBEFORE/NOTAFTER Reproduction material for SudoTimeWarp CVE-2026-96512. A sudoers rule whose DateSpec timestamp omits the trailing Z is converted by mktime, which re-reads getenv"TZ" on every call. Because sudo is setuid-root and the...
cve-2021-3156
sudo Heap Overflow Vulnerability CVE-2021-3156 Vulnerability Overview A foreign research team discovered a sudo heap overflow vulnerability CVE-2021-3156, which had been hidden for a decade. An ordinary user can exploit this vulnerability to gain root privileges on a sudo host with default...
cve-2017-8890-msf
Module: Phoenix Talon CVE 2017-8890 This may resolve issue 8571, which requests Phoenix Talon modules. Overview of 2017-8890 This CVE: is the most serious member of the Phoenix Talon class of Linux kernel vulnerabilities. No POC of this CVE exists in the Exploit DB. But other public POC's are...
CVE-2022-0847
Información Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 Cómo explotar Escalada de privilegios local gcc exploit.c -o explo...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: perf/core: Detaching event groups during removeonexec The perfeventremoveonexec function removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ipvs: Do not propagate the “one-packet” flag to synced connections. Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies the connection flags from the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed path resolution in ksmbdvfskernpathcreate. The SMB2 open lookup is rooted at the share using LOOKUPBENEATH, but the create/mkdir/hardlink logic does not use this approach. ksmbdvfskernpathcreate generates an...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: It was discovered that nfqueue holds the bridgeskb-dev variable while the packet is being queued. The function brpassFrameup reassigns skb-dev from the ingress port to the bridge master before queuing bridge...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ipv6: Proper accounting of fraggap on the paged allocation path In ip6.AppendData, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as follows: alloclen =...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ppp: The requirement for CAPNETADMIN in the target netns is necessary for unattached IOCTls. The opening of /dev/ppp is currently allowed for file-fcred-userns, while unattached administrative IOCTls operate on...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter. removewaiter is used by the slowlock paths, but it is also used for proxy-lock rollback in rtmutexstartproxylock when invoked from futexrequeue. In the latter case,...
Astra Linux – Vulnerability in Chromium
Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The use of uninitialized variables in Skia in Google Chrome prior to version 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 153.0.8010.36, reading data from out of bounds locations in Google Chrome allowed a remote attacker to read memory outside the sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: SCTP: Avoid a UAF situation during the teardown of a network namespace when authenable is set to true. The procsctpdoauth function updates the SCTP control socket after changing net.sctp.authenable. This function retrieves the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ipc: limits the allocation of the next ID to the valid ID range. The checkpoint/restore sysctl path can request the next SysV IPC ID through ids-nextid. Currently, ipcidralloc forwards that request to idralloc with an open-ended...
Astra Linux – Vulnerability in Chromium
Before version 150.0.7871.186, using Codecs in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: icmp: Fixed a NULL pointer dereference in icmptagvalidation. icmptagvalidation unconditionally dereferes the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse—only about 15 out o...