uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

netzob

=========================================================== Netzob : Protocol Reverse Engineering, Modeling and Fuzzing .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 See complete documentation here:...

uac

Unix 계열 아티팩트 수집기 UAC 소개 • 문서 • 주요 기능 • 지원 운영체제 • 사용법 • 기여 • 지원 • 라이선스 🔎 UAC 소개 UAC Unix 계열 아티팩트 수집기는 포렌식 조사관, 보안 분석가 및 IT 전문가를 위해 설계된 강력하고 확장 가능한 침해 대응 도구입니다. AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD, Solaris를 포함한 다양한 Unix 계열 시스템에서 아티팩트 수집을 자동화합니다. 침해 대응, 포렌식 조사 또는 규정 준수 확인을 수...

onionjuggler

OnionJuggler UNIXライクなOS向けの高機能オニオンサービス管理ツール（POSIX準拠のシェルスクリプト） OnionJugglerは、最小要件で動作するポータブルなスクリプトとドキュメントのコレクションで、サービス運用者が自身のオニオン（隠しサービス）を管理（ジャグリング）するのに役立ちます。 警告：このリポジトリはまだ信頼しないでください、hsキーは別の場所にバックアップしてください。このプロジェクトはまだリリースされておらず、開発専用と見なすべきです。 このリポジトリへのクイックリンク：git.io/onionjuggler 目次 はじめに 画像 経緯 目標 機能...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

pwnKit

pwnKit 概要: タイトル: pwnKit 説明: Unix系オペレーティングシステムにおける権限昇格 作成者: drapl0n バージョン: 1.0 カテゴリ: 権限昇格 ターゲット: Unix系オペレーティングシステム 攻撃モード: HID pwnKitは、USB-Rubber-Duckyペイロードによる権限昇格ツールであり、CVE-2021-4034を10秒未満で悪用し、rootシェルを生成します。 https://github.com/berdav に謝意を表します。 教育目的のみに使用してください。 バリエーション: 1. オンライン:...

pkexec-exploit

pkexec-exploit polkit の pkexec におけるローカル権限昇格 CVE-2021-4034 概要 Polkit 旧称 PolicyKit は、Unix 系オペレーティングシステムにおいてシステム全体の権限を制御するためのコンポーネントです。非特権プロセスが特権プロセスと通信するための体系化された方法を提供します。 エクスプロイトコード作成者 Ahmad Almorabea @almorabea 使用方法 test@ubuntu:/Desktop$ python3 CVE-2021-4034.py クレジット Qualys によるオリジナル研究...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.6:CLSA-2026:1779582830)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779582830 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...

CentOS Linux 7 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1787848037)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1787848037 advisory. - Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...

CentOS Linux 6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (CENTOS6:CLSA-2026:1777446368)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777446368 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on...

CentOS Linux 8 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1785335298)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1785335298 advisory. - Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in leng...

AlmaLinux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.6:CLSA-2026:1777661044)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777661044 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.2:CLSA-2026:1777565595)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777565595 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function...

CentOS Linux 6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (CENTOS6:CLSA-2026:1780067104)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1780067104 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...

Amazon Linux 2023 : awscli-2 (ALAS2023-2026-3133)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3133 advisory. Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file permissions the default on most...

CVE-2026-81886

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows dmp64 parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-jdbc (UTSA-2023-002182)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002182 advisory. pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or...

CVE-2026-81883: Out-of-bounds Read

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecode function parser read fixed function-metadata fields immediately after a function-name string without checking the...

UBUNTU-CVE-2026-53534

JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.getCommand passes it through...

CVE-2026-53534

JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.getCommand passes it through...