TripleCross

TripleCross TripleCross 是一个 Linux eBPF 根工具包，展示了 eBPF 技术的攻击性能力。 TripleCross 的灵感来源于先前该领域的植入设计，特别是 Jeff Dileo 在 DEFCON 271、Pat Hogan 在 DEFCON 292、Guillaume Fournier 和 Sylvain Afchain 也在 DEFCON 293 的工作，以及 Kris Nóva 的 Boopkit4。我们复用并扩展了这些先前对 eBPF 技术攻击性能力的探索中开创的一些技术。 此根工具包是为我在 UC3M 的学士学位论文创建的。其设计细节在 论文文...

CVE-2022-35506

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters...

EUVD-2022-38393

Malicious code in bioql PyPI...

EUVD-2022-38394

Malicious code in bioql PyPI...

CVE-2022-35505

A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command...

CVE-2022-35506

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters...

CVE-2022-35505

A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command...

CVE-2022-35505

A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command...

CVE-2022-35506

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters...

Command injection

A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command...

Stack overflow

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters...

CVE-2022-35506

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters...

CVE-2022-35506

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters...

CVE-2022-35506

CVE-2022-35506 affects TripleCross v0.1.0. The vulnerability is a stack overflow caused by unlimited length of program parameters. Public sources (NVD/Red Hat/OSV/etc.) confirm the issue but do not provide a confirmed patch version; PT-2022-22873 notes no information about a fix. The CVSSv3.1 met...

CVE-2022-35505

Affects TripleCross v0.1.0. Root cause: there is no limit to the length of the output of the executed command when a control command is sent from client to server, causing a segmentation fault. The CVE entry is supported by multiple sources (Red Hat, PT Security, OSV, NVD) describing the same iss...

CVE-2022-35505

A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command...

CVE-2022-35505

A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command...

CVE-2022-35506: Out-of-bounds Write

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters...

TripleCross 安全漏洞

TripleCross is a Linux eBPF rootkit with backdoor, C2, library injection, execution hijacking, persistence, and steganography from the individual developer Marcos Bajo in Spain. A security vulnerability exists in TripleCross version v0.1.0, which stems from a segmentation fault that occurs when...

TripleCross 缓冲区错误漏洞

TripleCross is a Linux eBPF rootkit with backdoor, C2, library injection, execution hijacking, persistence, and steganography from the individual developer Marcos Bajo in Spain. A security vulnerability exists in TripleCross version v0.1.0, which stems from containing a stack overflow with no lim...