67 matches found
CVE-2022-0847-DirtyPipe-Exploits
CVE-2022-0847-DirtyPipe-Exploits Este repositĆ³rio oferece uma coleĆ§Ć£o abrangente de exploraƧƵes e documentaĆ§Ć£o projetada especificamente para testadores de penetraĆ§Ć£o e profissionais de equipes vermelhas. Serve como um recurso valioso para aqueles que buscam explorar a vulnerabilidade Linux Dirty...
CVE-2022-0847-DirtyPipe-Exploits
CVE-2022-0847-DirtyPipe-Exploits Uma coleĆ§Ć£o de exploits e documentaĆ§Ć£o para testadores de penetraĆ§Ć£o e red teamers que pode ser usada para auxiliar a exploraĆ§Ć£o da vulnerabilidade Dirty Pipe do Linux. Sobre a Vulnerabilidade Dirty Pipe CVE-2022-0847 Ć© uma vulnerabilidade de escalonamento de...
CVE-2026-98361
A flaw was found in the Linux kernel's RDMA over Converged Ethernet rxe driver. This flaw allows a local attacker to achieve privilege escalation by overwriting arbitrary read-only files. Missing write permission checks during On-Demand Paging ODP operations allow an unprivileged user to map memo...
CVE-2022-0847-dirty-pipe-checker
CVE-2022-0847-dirty-pipe-checker Script Bash para verificar a CVE-2022-0847 Dirty Pipe Resumo Esta Ć© a histĆ³ria da CVE-2022-0847, uma vulnerabilidade no kernel do Linux desde a versĆ£o 5.8 que permite sobrescrever dados em arquivos arbitrĆ”rios somente leitura. Isso leva Ć escalada de privilĆ©gios,...
Dirty-Pipe-CVE-2022-0847
Dirty-Pipe-CVE-2022-0847 CVE-2022-0847 Dirty Pipe Ʃ uma vulnerabilidade de sobrescrita arbitrƔria de arquivos que permite a escalada de privilƩgios ao modificar ou sobrescrever arquivos arbitrƔrios somente leitura, por exemplo, /etc/passwd, /etc/shadow. Passos 1. Compile usando gcc...
Astra Linux ā Vulnerabilities in Linux 5.10, Linux 5.15
In the context of dm-verity-target.c, there is a potential way to modify read-only files due to a missing permission check. This could lead to a local escalation of privileges, as System execution privileges are required. User interaction is not necessary for exploiting this vulnerability. Produc...
dirtycaw-projet
Dirty COW - Escalada de privilĆ©gios CVE-2016-5195 Este projeto demonstra uma escalada de privilĆ©gios utilizando a vulnerabilidade Dirty COW em uma mĆ”quina virtual com Ubuntu Server 16.04.1 e kernel 4.4.0-31-generic. š§ Ambiente MĆ”quina vĆtima : Ubuntu 16.04.1 vulnerĆ”vel student sem privilĆ©gios...
Astra Linux ā Vulnerability in Linux 5.10
A flaw was discovered in the way the āflagsā member of the new pipe buffer structure lacked proper initialization in the copypagetoiterpipe and pushpipe functions of the Linux kernel. As a result, these members could contain stale values. An unprivileged local user could exploit this flaw to writ...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847 - Dirty Pipe Exploit A proof-of-concept exploit...
CVE-2026-47261
A flaw was found in Wasmtime, a runtime for WebAssembly. This vulnerability allows an attacker to bypass intended access controls when a filesystem preopen is configured with read-only file permissions but also allows directory mutations. By using specific open flags, an attacker can truncate fil...
SFDS: Selective File Disclosure System
Access control to networked resources has been a longstanding challenge. The conventional solution relies on authentication mechanisms, which introduce additional complexities associated with Identity and Access Management IAM. Such systems require user authentication, identity management, and...
nodejs: Node.js: Unauthorized file metadata modification
A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system...
nodejs: Node.js: Unauthorized file metadata modification
A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system...
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...
GO-2026-5392 BoxLite: Permission Bypass Allows Modification of Read-Only Files in github.com/boxlite-ai/boxlite/sdks/go
BoxLite: Permission Bypass Allows Modification of Read-Only Files in github.com/boxlite-ai/boxlite/sdks/go...
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...
About Elevation of Privilege - Linux Kernel "Fragnesia" (CVE-2026-46300) vulnerability
About Elevation of Privilege - Linux Kernel "Fragnesia" CVE-2026-46300 vulnerability. The vulnerability was discovered by researcher William Bowling together with the V12 team. Fragnesia belongs to the class of Dirty Frag vulnerabilities. It is an error in the ESP/XFRM subsystem, distinct from...