586 matches found
CopyFail-CVE-2026-31431
CopyFail: CVE-2026-31431 Python による copy.fail の実装です。AFALG + splice を介して setuid-root バイナリのページキャッシュを上書きし、root を取得します。競合状態もオフセットも不要で、2017 年以降のあらゆる Linux ディストリビューションで動作します。 要件 Python 3.6+ 3.12+ は os.splice をネイティブに使用、それ以前のバージョンは ctypes にフォールバック Linux カーネルが authencesnhmacsha256,cbcaes に対応していること。ない場合:...
ctf
CTF Related stuff Table of Contents The challs are linked in the table below. Description| Event/Game| Solution ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| An exe with a "login" functionality with the password in plain text in the memory. Blackbox| Level 2| An exe with setuid for...
CVE-2022-37706
CVE-2022-37706 개요 CVE-2022-37706 는 Linux용 Enlightenment 데스크탑 환경의 enlightenmentsys 구성 요소에서 발견된 로컬 권한 상승LPE 취약점입니다. 이 취약점은 낮은 권한의 로컬 사용자가 취약한 시스템에서 루트로 권한을 상승할 수 있도록 합니다. CVE ID: CVE-2022-37706 심각도: 높음 CVSS v3.1: 7.8 공격 경로: 로컬 영향 받는 구성 요소: enlightenmentsys CWE: CWE-269 부적절한 권한 관리 설명 취약점은...
check-copyfail-cve-2026-31431
check-copyfail check-copyfail.sh は、CVE-2026-31431（「Copy Fail」）に対するホストの曝露度を評価する読み取り専用の Bash スクリプトです。 作者: Silent4Labs このスクリプトはローカルシステムの以下を検査します: カーネルバージョンと既知の上流パッチ適用状況 影響を受けるディストリビューションのベースライン algifaead モジュールの状態 アクティブな AFALG ソケットの使用状況 authencesn の利用可否 /usr/bin/su などの一般的な読み取り可能な setuid-root ターゲット...
CVE-2026-82429
Description The setuid-root worker-launcher binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling lchown and chmod on each entry's full pathname while running with an effective uid of 0. Both syscalls re-resolve the path at the time of the call,...
EUVD-2026-77528
Description The setuid-root worker-launcher binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling lchown and chmod on each entry's full pathname while running with an effective uid of 0. Both syscalls re-resolve the path at the time of the call,...
Astra Linux – Vulnerability in ntfs-3g
A buffer overflow was discovered in NTFS-3G before October 3, 2022. Metadata created within an NTFS image can lead to code execution. A local attacker can exploit this vulnerability if the ntfs-3g binary has the setuid root privilege. An attacker who is physically nearby can also exploit this...
FreeBSD-SA-26:60.ppp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:60.ppp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in ppp8 Category: core Module: ppp Announced: 2026-08-25 Credits: Robert Morris...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 allows out-of-bounds write-ups, because the main function, while having setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...
CVE-2026-13367
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...
CVE-2026-13367 IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...
EUVD-2026-57623
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...
CVE-2026-13367
IBM Informix Dynamic Server versions 14.10 and 15.0 are affected by a local privilege escalation in the oninit setuid-root utility (CVE-2026-13367). The root cause is improper access control in the oninit binary, enabling a local, non-remote attacker with low privileges to gain root privileges. C...
CVE-2026-13367 IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...
CVE-2026-13367
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...
PT-2026-71323
Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 14.10 IBM Informix Dynamic Server version 15.0 Description A local privilege escalation issue exists in the oninit setuid-root utility. This allows a local user to gain elevated privileges on the system...
Security Bulletin: IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility (CVE-2026-13367)
Summary A privilege escalation vulnerability exists in the oninit utility of IBM Informix Dynamic Server. Successful exploitation could allow a local authorized user to gain root privileges. Vulnerability Details CVEID:CVE-2026-13367 DESCRIPTION: IBM Informix Dynamic Server contain a local...
pedit-cow-exploit
CVE-2026-46331 – pedit COW Local Privilege Escalation Proof-of...
CVE-2026-39461
libcasper3 communicates with helper processes via UNIX domain sockets, and uses the select2 system call to wait for data to become available. However, it does not verify that its socket descriptor fits within select2's descriptor set size limit of FDSETSIZE 1024. An attacker able to cause an...