127169 matches found
EUVD-2026-74020
In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55290
In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-74010
In getehtoperationchannelwidth of ieee80211common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-49882
In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-74004
In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45531
In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45531
CVE-2026-45531 affects Android and is located in the read_boot_region function of fsck.c . The root cause is an out-of-bounds read resulting from a heap buffer overflow , which can lead to local privilege escalation without requiring additional execution privileges or user interaction. The vulner...
CVE-2026-28624
CVE-2026-28624 is a confused deputy vulnerability in the Android platform that allows read/write access to files without proper permissions , enabling local escalation of privilege with no additional execution privileges and no user interaction. It carries a CVSS 3.1 score of 7.8 (HIGH) with high...
CVE-2022-0847-dirty-pipe-checker
CVE-2022-0847-dirty-pipe-checker 用于检查 CVE-2022-0847 的 Bash 脚本 Dirty Pipe 摘要 这是关于 CVE-2022-0847 的故事，自 5.8 版本以来 Linux 内核中的一个漏洞，允许覆盖任意只读文件中的数据。这会导致权限提升，因为非特权进程可以向根进程注入代码。 它与 CVE-2016-5195 “Dirty Cow” 类似，但更容易利用。 该漏洞已在 Linux 5.16.11、5.15.25 和 5.10.102 中修复。 如何使用 第一步 root@kitploit: git clone...
CVE-2022-0847-Docker
Dirty Pipe CVE-2022-0847：在Docker中的动手漏洞利用演示 本仓库提供了一个自包含、交互式的Docker环境，可安全演示和分析 "Dirty Pipe" 权限提升漏洞 。它旨在作为安全专业人士的教育工具，帮助在受控环境中理解关键内核级漏洞的机制。 1. 漏洞解析：什么是 Dirty Pipe？ Dirty Pipe 是 Linux 内核（影响 5.8 及更高版本）中发现的一个严重漏洞。它允许本地无权限用户覆盖任意只读文件中的数据 。 其影响极为严重：通过覆盖像 /etc/passwd 或 SUID 二进制文件这样的敏感文件，攻击者可以轻松将权限提升至...
CVE-2026-81823 AVEVA Pipeline Integrity Monitor Missing Authorization
The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted...
CVE-2026-81823
CVE-2026-81823 affects AVEVA Pipeline Integrity Monitor , specifically its PIMBoards component. A missing authorization flaw allows an unauthenticated attacker to perform read operations intended only for PIMBoards users, resulting in information disclosure . Write operations are not impacted. Th...
CVE-2026-81823 AVEVA Pipeline Integrity Monitor Missing Authorization
The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted...
CVE-2023-43494
CVE-2023-43494 Jenkins 2.50 hasta 2.423 ambos inclusive, LTS 2.60.1 hasta 2.414.1 ambos inclusive Lectura de archivos Referencias: https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...
cve-2019-2215_SH-M08
2019年10月之前的安全补丁的Android终端上获取root权限的概念证明代码的AQUOS sense 2（SH-M08）移植版。 运行环境 已验证以下OS版本可以运行。在其它版本或其它机型上运行时，请按照“移植方法”章节进行移植。 root@kitploit: ro.build.date: 2019年 3月 20日 水曜日 04:58:03 JST ro.build.description: Anasui-user 8.1.0 S3200 01.00.02 release-keys ro.build.display.id:...
mailorder
Mail Order Nalpeiron 授权服务（NLSSRV32.exe）会在某些软件安装过程中被一同安装，用于处理特权的软件授权操作。它与客户端组件（filechck.dll）配合使用，通过邮件槽（mailslot）进行通信（因此得名）。 通过自定义序列化方式向该服务发起调用，其中许多调用涉及对机器所挂载磁盘卷的直接访问。我认为这些调用用于对服务本身及客户端二进制文件进行完整性检查。其中许多调用类型并未限制管理员权限，因此可被用于读取（甚至可能写入）本地驱动器的原始数据。 我不清楚该服务有多普遍。最显著的例子是 Nitro PDF MailOrder.exe c 4096 +...
CVE-2019-20372
Poc for CVE 2019-20372 [email protected] 描述 在 1.17.7 之前的 NGINX 版本中，结合特定的 errorpage 配置，会导致 HTTP 请求走私漏洞。攻击者可以在 NGINX 前端存在负载均衡器的环境下，读取未授权的网页内容。 CVE-2019-20372 利用工具 这个 Python 脚本旨在对 Web 服务器执行一系列安全测试，以检测运行易受攻击版本 Nginx 1.14.2 的服务器中存在的 CVE-2019-20372 漏洞。此外，该脚本会验证 HTTP 头、允许的 HTTP 方法，并尝试进行漏洞利用。 功能 1. ...
CVE-2021-33564
CVE-2021-33564 PoC 针对 CVE-2021-33564（Dragonfly Ruby Gem 中的参数注入漏洞）的利用脚本。 使用说明 任意文件读取 python3 poc.py -u https:///system/refinery/images -r /etc/passwd 任意文件写入 python3 poc.py -u https:///system/refinery/images -w public/test.txt -c test.txt -lu http:// 更多信息请访问博客。...
dirtypipe
reF: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 诊断 已开发出一个漏洞检测脚本，用于确定您的系统当前是否受到此漏洞的影响。要验证脚本的真实性，您还可以下载分离的 OpenPGP 签名。有关如何使用 GPG 签名进行验证的说明，可在客户门户网站中找到。 常见问题 问：此漏洞如何修改只读内容？ 答：当文件被访问时，它会加载到内存的“缓存”区域（页面缓存），攻击者能够更改缓存内存中的文件内容。因此，后续对文件的读取将返回被篡改的内容。 问：此漏洞是否会损坏磁盘上实际文件的内容？...