4586 matches found
threat-intel-cve-2024-3094
Threat Intelligence Report: CVE-2024-3094 – XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...
CVE-2025-6018
CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 中文 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp...
CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp...
remediate_cesa_2019_2091
cesa20192091 This module contains a Bolt Task that will remediate CVEs described in CESA-2019:2091 and parallel issues present on other Enterprise Linux 7 EL7 platforms. Table of Contents 1. Description 2. Setup - The basics of getting started with cesa20192091 Beginning with cesa20192091 3. Usag...
CVE-2025-6018_CVE-2025-6019_autopwn
Chained Exploit CVE-2025-6018 & CVE-2025-6019 Auto-Pwn This repository contains a full exploit chain "Auto-Pwn" targeting two critical vulnerabilities primarily affecting openSUSE Leap 15.x / SUSE systems: 1. CVE-2025-6018 : PAM Environment Injection. Allows a user to modify sensitive variables...
Astra Linux – Vulnerability in Systemd
Before version 247, systemd does not properly prevent local privilege escalation for certain Sudo configurations. For example, plausible sudoers files may allow the execution of the “systemctl status” command. Specifically, systemd does not set LESSSECURE to 1, allowing other programs to be...
Astra Linux – Vulnerability in cups
OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, there was an integer underflow vulnerability in the ppdCreateFromIPP function cups/ppd-cache.c. This vulnerability allowed any unprivileged local user to crash the...
Exploit for Privilege Chaining in Canonical Ubuntu_Linux
CVE-2026-3888: snap-confine and systemd-tmpfiles race This re...
Rocky Linux 9.6 [CIQ] Security Update: rhel-net-naming-sysattrs / systemd / systemd-boot-unsigned / etc Multiple Vulnerabilities (ciqsa-2026_1638)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261638 advisory. This advisory aggregates security fixes for the systemd SRPM in CIQ LTS 9.6. It addresses 11 CVEs: CVE-2018-15688, CVE-2019-6454, CVE-2020-1712,...
Exploit for Incorrect Authorization in Systemd_Project Systemd
Exploit-CVE-2026-40224 CVE-2026-40224: systemd-machined local...
needrestart
needrestart Informazioni needrestart verifica quali demoni devono essere riavviati dopo gli aggiornamenti delle librerie. Si ispira a checkrestart del pacchetto debian-goodies. Nella directory ex/ ci sono alcuni script hook da usare con apt e dpkg. Gli script chiameranno needrestart dopo ogni...
uptux
uptux Chequeos especializados de escalada de privilegios para sistemas Linux. Implementados hasta ahora: Rutas de systemd, servicios, temporizadores y unidades de socket escribibles Desensambla archivos de unidad systemd buscando: Referencias a ejecutables que son escribibles Referencias a enlace...
lxd_root
Privilege Escalation di Linux tramite LXD Panoramica I membri del gruppo locale lxd sui sistemi Linux hanno numerose strade per elevare i propri privilegi a root. Questo repository contiene esempi di exploit locali completamente automatizzati. Una spiegazione dettagliata della vulnerabilità e...
Astra Linux – Vulnerability in Systemd
In nspawn in systemd 233 through 259, before 260, an escape-to-host action can occur through a crafted optional config file...
Astra Linux – Vulnerability in Systemd
A issue was discovered in buttonopen in the login/logind-button.c file in systemd before version 243. When executing the udevadm trigger command, a memory leak may occur...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INTMAX When sysctlnropen is set to a very high value for example, 1073741816 as set by systemd, processes attempting to use file descriptors near the limit may trigger massi...
Astra Linux – Vulnerability in Systemd
In udev under systemd, before version 260, local root execution could occur through malicious hardware devices and unsanitized kernel output...
Rocky Linux 9 [CIQ] Security Update: rhel-net-naming-sysattrs / systemd / systemd-boot-unsigned / etc (crlsa-2026_19213)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619213 advisory. systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data CVE-2026-29111 Tenable has extracted the preceding description block...
Rocky Linux 8 [CIQ] Security Update: systemd / systemd-container / systemd-container-debuginfo / etc (crlsa-2021_2717)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20212717 advisory. systemd: uncontrolled allocation on the stack in function unitnamepathescape leads to crash CVE-2021-33910 Tenable has extracted the preceding description block...
Rocky Linux 9 [CIQ] Security Update: rhel-net-naming-sysattrs / systemd / systemd-boot-unsigned / etc (crlsa-2026_13677)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202613677 advisory. systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data CVE-2026-29111 Tenable has extracted the preceding description block...