raven

Raven C2 externo de CobaltStrike para Websockets Información adicional: https://www.cobaltstrike.com/help-externalc2 Compilación del servidor Ubuntu Copia la carpeta del servidor a tu VPS. Ejecuta ./setup.sh como root o con sudo. Compilación del cliente Windows Copia la carpeta del cliente a un...

lxd-group-privesc-report

LXD Root Escalada local de privilegios a root mediante la membresía predeterminada del grupo lxd y el paquete lxd-installer en Ubuntu. La demo se ejecuta en AWS EC2 Ubuntu Server 26.04 El fallo es que la instalación predeterminada de Ubuntu Server 26.04 concede silenciosamente al usuario principa...

ssh-enum

ssh-enum Estudio de Validación Estadística de CVE-2016-6210 Una reinvestigación reproducible de la enumeración de nombres de usuario de OpenSSH mediante análisis estadístico. Este proyecto reinvestiga CVE-2016-6210 , un canal lateral de temporización documentado de OpenSSH, para determinar si sig...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Verifica CVE-2020-11932 y prueba si el host está relacionado con esta vulnerabilidad Uso Descarga root@kitploit: git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh Con curl sin descarga root@kitploit: bash...

my-cve-2021-4034-poc

my-cve-2021-4034-poc my PoC quick and dirty code as uni has me busy, works on my ubuntu server...

wongpress

Explotación en un Caso Real de Desbordamiento de Búfer y Vulnerabilidades de Cadena de Formato para Obtener RCE en un Servidor Ubuntu CVEs Relacionados CVE-2024-2961 : Vulnerabilidad de desbordamiento de búfer en la función iconv de Glibc CVE-2024-29510 : Vulnerabilidad de cadena de formato en...

Exploit for Protection Mechanism Failure in Artifex Ghostscript

Real Case Exploitation of Buffer Overflow & Format String Vuln...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CopyFail-Fix 🌐 English | Português |...

UBUNTU-CVE-2026-33610

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it...

Canonical Subiquity 安全漏洞

Canonical Subiquity is an Ubuntu server installation program developed by the British company Canonical. Version 24.04.4 of Canonical Subiquity contains a security vulnerability, which stems from improper handling of crash reports and could lead to the exposure of sensitive credentials...

Exploit for Race Condition in Canonical Ubuntu_Linux

Privilege Escalation using the Dirty Cow Kernel Exploit By...

CVE-2019-12164

ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...

EUVD-2019-3813

Malware in sbrugna...

EUVD-2020-4269

Malware in sbrugna...

EUVD-2023-57848

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-11932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered. CVE-2020-11932 Note that Ness...

Exploit for CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, w...

USN-7314-1: Kerberos vulnerabilities

It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. CVE-2024-26458, CVE-2024-26461 It was discovered that Kerberos incorrectly handled certain memory...

Ubuntu 20.04 LTS / 22.04 LTS / 24.10 : nginx vulnerability (USN-7285-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7285-1 advisory. It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address and port. An attacker...

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...