Lucene search
+L

983 matches found

Kitploit
Kitploit
added 2026/09/13 4:35 a.m.11 views

CVE-2026-41651

🚨 CVE-2026-41651 — Pack2TheRoot Vulnerabilidad de escalada de privilegios en PackageKit condición de carrera TOCTOU 📌 Descripción general CVE-2026-41651 es una vulnerabilidad de escalada de privilegios local que afecta al servicio del sistema PackageKit utilizado en varias distribuciones de Linux...

8.8CVSS7.8AI score0.0046EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/13 4:32 a.m.3 views

SNEK_Equinox

SNEK Equinox I would like to thank Nightmare-Eclipse for the inspiration not personal from the project UnDefend - https://web.archive.org/web/20260521145157/https://github.com/Nightmare-Eclipse/UnDefend: Now funnily enough, I found a way to lie to the EDR web console to show that defender is up a...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:04 a.m.9 views

CVE-2026-41651

Pack2TheRoot — CVE-2026-41651 TOCTOU race in PackageKit's transaction handler. Any local unprivileged user can install arbitrary packages as root with no authentication. Overview Field| Value ---|--- CVE| CVE-2026-41651 Component| PackageKit daemon packagekitd Affected versions| 1.0.2 – 1.3.4 Fix...

8.8CVSS7.9AI score0.0046EPSS
SaveExploits12References3
Kitploit
Kitploit
added 2026/09/12 7:36 p.m.6 views

sudo_digest_toctou_poc_CVE-2015-8239

sudoers DigestSpec TOCTOU POC Justificación Alyssa Milburn https://twitter.com/noopwafel descubrió un error de condición de carrera TOCTOU en sudo cuando se utiliza la configuración DigestSpec. La configuración DigestSpec se puede utilizar para permitir que un usuario ejecute sudo en un binario s...

7CVSS7.3AI score0.00542EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:02 p.m.5 views

VQ-RefluxCore

VQ-RefluxCore: Kernel Vulnerability Assessment & Research Framework VQ-RefluxCore is an advanced security research framework designed to model, analyze, and demonstrate Local Privilege Escalation LPE mechanics associated with kernel-level race conditions and filesystem structure vulnerabilities...

7.8CVSS6.5AI score0.00467EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/12 3:03 a.m.5 views

POC-CopyEscape-CVE-2026-17106

CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...

7.1CVSS6AI score0.00325EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 12:03 a.m.5 views

CVE-2024-30088-

Debilidad: CWE-367: Condición de carrera de verificación en el momento de uso TOCTOU Fuente CVSS: Microsoft CVSS: 3.1 7.0 / 6.3...

7CVSS7.6AI score0.68202EPSS
SaveExploits7
NVD
NVD
added 2026/09/11 8:20 p.m.6 views

CVE-2026-89766

In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...

0.00184EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/11 8:19 p.m.4 views

DEBIAN-CVE-2026-89713

In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...

9.1CVSS0.002EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:19 p.m.6 views

CVE-2026-89713

In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...

9.1CVSS0.002EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 7:47 p.m.26 views

CVE-2026-89766 pidfd: hold exec_update_lock around namespace ioctl

In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...

0.00184EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/11 7:46 p.m.4 views

CVE-2026-89713 NFSD: check truncate permission under inode lock

In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...

6AI score
SaveExploits0References7
CVE
CVE
added 2026/09/11 7:46 p.m.12 views

CVE-2026-89713

A TOCTOU race condition in the Linux kernel's NFS Daemon (NFSD) component allows a remote, unauthenticated attacker to bypass append-only file protections. In nfsd_setattr(), the NFSD_MAY_TRUNC permission check samples the file size without holding inode_lock(), but the actual size update is appl...

9.1CVSS0.002EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 7:46 p.m.28 views

CVE-2026-89713 NFSD: check truncate permission under inode lock

In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...

9.1CVSS0.002EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/11 7:46 p.m.8 views

EUVD-2026-76625

In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...

0.002EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/11 7:46 p.m.5 views

CVE-2026-89713

In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...

9.1CVSS0.002EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:21 p.m.5 views

CVE-2026-17106

CVE-2026-17106 — CopyEscape:docker cp container-to-host arbitrary file write HackSpeak distribution mirror. This repository is a distribution mirror of the CopyEscape PoC CVE-2026-17106 published by the Imperva Red Team Ron Masas , with the code identical to upstream; upstream does not include a...

7.1CVSS6AI score0.00325EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/11 6:12 a.m.8 views

CVE-2026-11111-TOCTOU-in-File-Permission-Check-Before-Open

CVE-2026-11111 – TOCTOU in File Permission Check Before Open Program Code Python root@kitploit: toctouserver.py - File server that checks permission then opens import os, time, tempfile from flask import Flask, request app = Flaskname SAFEDIR = '/tmp/safe' @app.route'/read' def readfile: filename...

8.1CVSS7.6AI score0.00228EPSS
SaveExploits1
OSV
OSV
added 2026/09/11 5:58 a.m.11 views

BIT-TOMCAT-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.42 through...

8.1CVSS5.8AI score0.00452EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 5:25 a.m.6 views

symboliclink-testing-tools

symboliclink-testing-tools c Google Inc. 2015 Desarrollado por James Forshaw Este es un pequeño conjunto de herramientas para probar varios tipos de enlaces simbólicos de Windows. Consta de las siguientes herramientas: BaitAndSwitch : Crea un enlace simbólico y utiliza un OPLOCK para ganar una...

5.8AI score
SaveExploits0
Rows per page
Query Builder