244 matches found
CVE-2023-52654
Esegui il file python3 CVE-2023-52654.py oppure sudo CVE-2023-52654.py POC aggiornato per il bypass root del kernel più recente: basta eseguire il file python con root o senza root ✅ Funzionalità Elevazione automatica dei privilegi su sistemi Unix sfruttando binari setuid/setgid configurati in mo...
Mitigaciones
Mitigações CVE-2026-31431 "Copy Fail" Coleção de scripts e playbooks de automação para a detecção e mitigação da vulnerabilidade CVE-2026-31431 escalada de privilégios locais mediante corrupção do page cache em binários setuid em sistemas Linux. Conteúdo do Repositório cve-2026-31431-mitigator.sh...
Linux-Kernel-Copy-Fail-CVE-2026-31431-
تحليل ثغرة Copy Fail CVE-2026-31431 وممارسة الاستجابة لها هذا المشروع عبارة عن مشروع مصغّر لتحليل مبدأ عمل ثغرة Copy Fail CVE-2026-31431 في نواة Linux، ومقارنة الحالة قبل وبعد الترقيع باستخدام أداة الفحص غير المدمرة من مستودع PoC العام. لم يتم تنفيذ أي استغلال فعلي لتعديل ثنائيات setuid أو تعديل...
Astra Linux - Vulnerability in Golang-1.19
On Unix platforms, the Go runtime behaves differently when a binary is run with the setuid/setgid bits enabled. This can be dangerous in certain situations, such as when dumping memory state or assuming the status of standard I/O file descriptors. If a setuid/setgid binary is executed with standa...
Linux Distros Unpatched Vulnerability : CVE-2026-15226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler snap-confine. The default seccomp securi...
CVE-2026-15226
Canonically reported vulnerability CVE-2026-15226 affects Canonical snapd’s sandboxed environment (snap-confine). The issue: default seccomp templates did not filter or reject operations to create/manipulate file execution flags with set-user-id attributes, allowing a strictly confined snap to co...
CVE-2026-15226
A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler snap-confine. The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process operations capable of creating or...
CVE-2026-15226
A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler snap-confine. The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process operations capable of creating or...
PT-2026-61944
Name of the Vulnerable Software and Affected Versions Canonical snapd affected versions not specified Description A sandbox confinement bypass exists in the internal execution environment compiler snap-confine. The default seccomp security templates, which are used to restrict system calls, fail ...
TencentOS Server 2: glibc (TSSA-2025:1030)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:1030 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
CVE-2026-49414 ASLR bypass for setuid executables via procctl(2)
The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen. An unprivileged local user ca...
CVE-2026-49414
CVE-2026-49414 is a local ASLR bypass in FreeBSD: the ELF image activator clears per-process ASLR preferences for setuid binaries after computing the PIE base, allowing an unprivileged local user to disable ASLR for a setuid PIE binary via procctl(2) before execve(2). This makes exploitation of a...
PT-2026-53064
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The ELF image activator cleared per-process ASLR Address Space Layout Randomization, a security technique that randomizes memory addresses to prevent exploitatio...
CVE-2026-48980
The PAM module pam_usb is affected by a local-access vulnerability in earlier releases (pre-0.9.2) where getenv() in a PAM context returns attacker-controlled values for XRDP_SESSION, DISPLAY, and TMUX when the environment is manipulated by a local user. These values influence local-vs-remote ses...
CVE-2026-48980 pam_usb: getenv() used in PAM context allows environment variable injection into local-check logic
pamusb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv environment variables XRDPSESSION, DISPLAY and TMUX allow environment variable injection into local-check logic. These environment variables influence whether a current session is local or...
FreeBSD : FreeBSD -- Flaw in Linuxulator execution of setugid binaries (fa5289e4-6473-11f1-958d-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fa5289e4-6473-11f1-958d-bc241121aa0a advisory. The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the PSUGID...
FreeBSD : FreeBSD-kernel -- ASLR bypass for setuid executables via procctl(2) (7e61007e-6474-11f1-958d-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7e61007e-6474-11f1-958d-bc241121aa0a advisory. The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code th...
FreeBSD Security Advisory - FreeBSD-SA-26:32.elf
FreeBSD Security Advisory - The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen...
FreeBSD-kernel -- ASLR bypass for setuid executables via procctl(2)
Problem Description: The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen. Impact: ...
