Linux Nested User Namespace idmap Limit Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Nested User Namespace idmap Limit Local Privilege Escalation', 'Description' = %q This module exploits a vulnerability in Linux kernels...

Linux Nested User Namespace idmap Limit Local Privilege Escalation Exploit

This Metasploit module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18, and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user namespaces and kernel uid/gid mappings allow elevation to root CVE-2018-18955. The target system must have unprivileged user namespaces enabl...

Linux Nested User Namespace idmap Limit Local Privilege Escalation

This module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18, and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user namespaces and kernel uid/gid mappings allow elevation to root CVE-2018-18955. The target system must have unprivileged user namespaces enabled and the...

Reptile Rootkit reptile_cmd Privilege Escalation

This module uses Reptile rootkit's reptilecmd backdoor executable to gain root privileges using the root command. This module has been tested successfully with Reptile from master branch 2019-03-04 on Ubuntu 18.04.3 x64 and Linux Mint 19 x64. Module Options msf use...

Airties AIR5342 1.0.0.18 - Cross-Site Scripting

Exploit Title: Airties AIR5342 1.0.0.18 - Cross-Site Scripting Date: 25-09-2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.airties.com/ Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 Affected products: AIR5342, AIR5343v2, AIR5443v2, AIR5453, AIR5442,...

Airties AIR5342 1.0.0.18 - Cross-Site Scripting

Airties AIR5342 1.0.0.18 - Cross-Site Scripting Exploit Title: Airties AIR5342 1.0.0.18 - Cross-Site Scripting Date: 25-09-2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.airties.com/ Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 Affected products: AIR534...

Ettercap - A Comprehensive Suite For Man In The Middle Attacks

Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis. ETTERCAP...

Linux Kernel UDP Fragmentation Offset (UFO) Privilege Escalation Exploit

This Metasploit module attempts to gain root privileges on Linux systems by abusing UDP Fragmentation Offload UFO. This exploit targets only systems using Ubuntu Trusty / Xenial kernels 4.4.0-21 'Linux Kernel UDP Fragmentation Offset UFO Privilege Escalation', 'Description' = %q This module...

Linux Kernel - UDP Fragmentation Offset 'UFO' Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Kernel UDP Fragmentation Offset UFO Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on Linux systems...

Linux - BPF Sign Extension Local Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux BPF Sign Extension Local Privilege Escalation', 'Description' = %q Linux kernel prior to 4.14.8 utilizes the Berkeley Packet Filter BPF whi...

Linux BPF Sign Extension Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux BPF Sign Extension Local Privilege Escalation', 'Description' = %q Linux kernel prior to 4.14.8 utilizes the Berkeley Packet Filter BPF whi...

Linux Kernel < 4.14.8 Sign Extension Local Privilege Escalation Exploit

Linux kernel versions prior to 4.14.8 utilize the Berkeley Packet Filter BPF which contains a vulnerability where it may improperly perform signing for an extension. This can be utilized to escalate privileges. The target system must be compiled with BPF support and must not have...

Super Cool Awesome Money Number Error Vulnerability

Super Cool Awesome Money SCAM is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in SCAM's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

EXGROUP Numeric Error Vulnerability

EXGROUP is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EXGROUP's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

CoquinhoERC20 Integer Overflow Vulnerability

CoquinhoERC20 is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of CoquinhoERC20's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

ProvidenceCasino Buffer Overflow Vulnerability

Providence Crypto Casino PVE ContractName:ProvidenceCasinoToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PVE's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary...

DigitalCloudToken Digital Error Vulnerability

DigitalCloudToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mint' function in DigitalCloudToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

BetterThanAdrien Number Error Vulnerability

BetterThanAdrien is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in BetterThanAdrien's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

SIPCToken Integer Overflow Vulnerability

SIPCToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in SIPCToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

C3 Token Number Error Vulnerability

C3 Token C3 is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in C3's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...