1116 matches found
New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager
Multiple security vulnerabilities have been disclosed in Canonical's Snap software packaging and deployment system, the most critical of which can be exploited to escalate privilege to gain root privileges. Snaps are self-contained application packages that are designed to work on operating syste...
USN-5292-3: snapd vulnerabilities
USN-5292-1 fixed several vulnerabilities in snapd. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: James Troup discovered that snap did not properly manage the permissions for the snap directories. A local attacker could possibly...
Oh Snap! More Lemmings: Local Privilege Escalation Vulnerability Discovered in snap-confine (CVE-2021-44731)
The Qualys Research Team has discovered multiple vulnerabilities in the snap-confine function on Linux operating systems, the most important of which can be exploited to escalate privilege to gain root privileges. Qualys recommends security teams apply patches for these vulnerabilities as soon as...
Introducing Qualys Context XDR: the Difference between Chaos & Clarity
In my role as a product leader, I have the pleasure of meeting security practitioners from organizations big and small, across multiple industry segments and geographies. No matter how large or small their budget or staff is, how much they’ve invested in their tech stack or how much experience th...
Catching the RAT called Agent Tesla
For the last few years, the Qualys Research Team has been observing an infamous "Malware-as-a-service" RAT Remote Access Trojan called Agent Tesla. It first appeared in 2014, and since then many variants have been deployed. This malware uses multiple techniques for evading detection as well as...
Vulnerability Remediation: It’s Not Just Patching
Vulnerability does not equal a patch, as such remediating a detected vulnerability requires deploying the right patches and, in some cases, making the right configuration changes. Using multiple tools to detect, map and deploy the right remediation actions is time consuming and will result in les...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
pkexec-exploit Local Privilege Escalation in polkit's pkexec...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
PwnKit Vulnerability - Local Privilege Escalation - Title:...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 The Polkithttps://en.wikipedia.org/wiki/Polk...
CVE-2021-4034
A local privilege escalation vulnerability was found on polkit’s pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn’t handle the calling parameters coun...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 Precompiled builds for CVE-2021-4034. Of course...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 Local privilege escalation via pkexec You...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
Information Exploit Title: Local Privilege Escalation i...
PolicyKit-1 0.105-31 Privilege Escalation
Exploit Title: PolicyKit-1 0.105-31 - Privilege Escalation Exploit Author: Lance Biggerstaff Original Author: ryaagard https://github.com/ryaagard Date: 27-01-2022 Github Repo: https://github.com/ryaagard/CVE-2021-4034 References: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 One day for the polkit privilege escalation expl...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034-POC POC for pwnkit vulnerability discovered by...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 Dirty PoC for CVE-2021-4034 Pwnkit Full credi...