blackbox-pentesting-infsecos

Prueba de Penetración de Caja Negra — SecOS:1 VulnHub Resumen Prueba de penetración de caja negra completa contra SecOS:1 , una máquina CTF deliberadamente vulnerable de VulnHub. Objetivo: simular un atacante real sin conocimientos previos y lograr un compromiso a nivel de root, evidenciado por l...

CVE-2020-5902

🚨 CVE-2020-5902 — F5 BIG-IP TMUI RCE CVE-2020-5902 es una vulnerabilidad crítica de Ejecución Remota de Código RCE sin autenticación en la Interfaz de Usuario de Gestión de Tráfico TMUI / utilidad de configuración de F5 BIG-IP. 📌 Resumen Divulgada por F5 el 30 de junio de 2020 NVD publicó el 1 de...

Kioptrix-Level1-Vulnerability-Analysis

Kioptrix Level 1: Auditoría y Explotación de Vulnerabilidades de Espectro Completo 🏛️ Objetivo Profesional El objetivo era realizar una prueba de penetración estructurada en el entorno Kioptrix Level 1 para lograr el compromiso total de 'root' y documentar estrategias técnicas de remediación...

CVE-2026-87799 Arbitrary file write on LXD host via symlink in migration stream

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

CVE-2026-87799 Arbitrary file write on LXD host via symlink in migration stream

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

CVE-2026-87799

Canonical LXD versions 4.0 and later on Linux (fixed in 4.0.14, 5.0.10, 5.21.8, and 6.10) are vulnerable to an arbitrary file write due to improper link resolution in the migration receive path. An authenticated client capable of creating instances or custom storage volumes, or a malicious migrat...

CVE-2025-8110

CVE-2025-8110 — Gogs = 0.13.3 Escritura Arbitraria de Archivos mediante Symlink Traversal Resumen Gogs = 0.13.3 es vulnerable a la escritura arbitraria de archivos a través de la API PutContents /api/v1/repos/:owner/:repo/contents/:path. La API valida rutas de archivo para secuencias de directory...

CVE-2025-54322-exploit

CVE-2025-54322: Exploit RCE Pre-Autenticación en XSpeeder SXZOS Un exploit profesional de Prueba de Concepto PoC para CVE-2025-54322 , una vulnerabilidad crítica de ejecución remota de código sin autenticación en el firmware XSpeeder SXZOS. Esta vulnerabilidad fue descubierta y divulgada por el...

RootQuest-CTF-Box-Multi-Stage-Exploitation-VM

RootQuest Caja CTF — Máquina de Explotación Multietapa 💀 Kalaichelvan Thieveshkar CB013248 · Staffordshire University · COMP50003 - Cyber Security II Resumen RootQuest es una máquina virtual CTF diseñada específicamente que contiene una ruta de ataque secuencial de 10 etapas que abarca 5 dominios...

Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload

Cisco ISE and Cisco ISE-PIC contain an unrestricted file upload vulnerability caused by lack of file validation in an internal API, letting unauthenticated remote attackers upload and execute files as root, exploit requires crafted file upload. id: CVE-2025-20282 info: name: Cisco ISE 3.4P2 -...

CVE-2026-100716

Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export DataDump cron fails to validate intermediate path components of the export destination: Froxlor\FileDir::makeCorrectDir contains an off-by-one in its path-component walk that skips the first segment...

CVE-2026-100713

Froxlor 2.3.10 and earlier contain a time-of-check time-of-use TOCTOU race condition in the SSH key synchronization cron lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFiles. The containment/symlink validation performed by FileDir::makeCorrectDir/makeCorrectFile is done only at check time;...

CVE-2026-100716

The Froxlor server administration panel (versions 2.3.10 and earlier ) is vulnerable to a privilege escalation flaw in the customer data-export (DataDump) cron. The root cause is an off-by-one error in Froxlor leFileDir::makeCorrectDir(), which skips the first path segment below the customer home...

CVE-2026-100713 Froxlor before 2.3.12 Privilege Escalation via SSH Key Sync

Froxlor 2.3.10 and earlier contain a time-of-check time-of-use TOCTOU race condition in the SSH key synchronization cron lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFiles. The containment/symlink validation performed by FileDir::makeCorrectDir/makeCorrectFile is done only at check time;...

CVE-2026-100713 Froxlor before 2.3.12 Privilege Escalation via SSH Key Sync

Froxlor 2.3.10 and earlier contain a time-of-check time-of-use TOCTOU race condition in the SSH key synchronization cron lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFiles. The containment/symlink validation performed by FileDir::makeCorrectDir/makeCorrectFile is done only at check time;...

CVE-2026-100713 Froxlor before 2.3.12 Privilege Escalation via SSH Key Sync

Froxlor 2.3.10 and earlier contain a time-of-check time-of-use TOCTOU race condition in the SSH key synchronization cron lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFiles. The containment/symlink validation performed by FileDir::makeCorrectDir/makeCorrectFile is done only at check time;...

CVE-2026-100713

Froxlor versions 2.3.10 and earlier are vulnerable to a time-of-check time-of-use (TOCTOU) race condition in the SSH key synchronization cron (lib/Froxlor/Cron/System/SshKeys.php ). The flaw exists because symlink validation occurs only at check time, while the filesystem path is re-resolved as r...

EUVD-2026-87686

Froxlor 2.3.10 and earlier contain a time-of-check time-of-use TOCTOU race condition in the SSH key synchronization cron lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFiles. The containment/symlink validation performed by FileDir::makeCorrectDir/makeCorrectFile is done only at check time;...

Exploit for Write-what-where Condition in Linux Linux_Kernel

CVE-2026-43284-DIRTY-FRAG- Detailed technical analysis of CVE-...

CVE-2026-76714

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system...