PIL-CVE-2017-8291-study

PIL-CVE-2017-8291 Baek Seunghoon@shun1403, clase 13 del 3er ciclo de White Hat School https://github.com/shun1403/PIL-CVE-2017-8291.git Entorno: Ubuntu Linux Configuración del entorno Actualice a V2 mediante sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin...

linux-apache-fix-mod_rewrite-spaceInURL

修复 Linux Ubuntu Apache modrewrite 中 URL 包含空格的问题 在最近的 Apache 升级后，我在 modrewrite 中遇到了“URL 中包含空格”的问题。 2023-04-25 - 升级 apache2:amd64 2.4.38-3+deb10u9 → 2.4.38-3+deb10u10 包含“空格”且已被替换为 %20 的 URL 开始被 Apache 返回 403 错误。 我发现此次更新实际上是为了修复以下问题：...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 和 CVE-2023-32629 GameOverLay - 真实主机根权限逃逸验证程序 一个交互式、多步骤的本地权限提升（LPE）概念验证（PoC），针对Ubuntu Linux内核OverlayFS漏洞（CVE-2023-2640 / CVE-2023-32629 ）。 与标准的自动化单行命令不同，后者会将您的交互式shell困在受限的用户命名空间（虚假根）中，本方法将漏洞利用序列拆分，以安全地获得一个 真正、不受限制的主机根shell。 "虚假根"问题解释 许多公开的漏洞利用将设置和执行串在一起，使用一个自动化的shell序列，如下所示： unshare...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

OverlayFS-LPE-Exploit

OverlayFS-LPE-Exploit OverlayFS 本地权限提升（CVE-2021-3493） 项目概述 本仓库包含针对 Ubuntu Linux 内核中发现的本地权限提升（LPE）漏洞的文档及利用代码。已在 TryHackMe 实验室环境中完成测试。 实验亮点 目标：Ubuntu Linux（存在漏洞的系统） 利用方式：本地权限提升（LPE） 目标：从普通用户获取 root 权限 说明 仅用于教育及道德网络安全实践。...

PwnTillDawn-Portal-Walkthrough

🔐 Evaluación de Vulnerabilidades y Pruebas de Penetración VAPT 📌 Proyecto: Recorrido de Explotación del Objetivo ⚠️ Este proyecto es solo para fines educativos y de pruebas autorizadas. El acceso no autorizado a sistemas está estrictamente prohibido. 👨‍💻 Autor SYAFIQ Rol: Líder de Pruebas de...

UBUNTU-CVE-2026-31911

libpcap BPF interpreter calls abort if it encounters a BPF instructi...

ROOT-OS-UBUNTU-2204-CVE-2025-38420 CVE-2025-38420 in linux - Patched by Root

Root has patched CVE-2025-38420 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-78221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory...

Linux Distros Unpatched Vulnerability : CVE-2026-81738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out- of-bounds write via crafted DOMAIN-SEARCH entries...

Linux Distros Unpatched Vulnerability : CVE-2026-78043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and...

Linux Distros Unpatched Vulnerability : CVE-2026-84256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary comman...

Linux Distros Unpatched Vulnerability : CVE-2026-82312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.0.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC...

Linux Distros Unpatched Vulnerability : CVE-2026-84226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network...

Linux Distros Unpatched Vulnerability : CVE-2026-84383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - GHSA-g89c-p67h-r497: Heap buffer overflow in scalenearestneighbor via duplicate Alpha planes from nested iden/auxl items CVE-2026-84383 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-65165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix various issues around job steps and node count discrepancies CVE-2026-65165 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-65140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...

Linux Distros Unpatched Vulnerability : CVE-2026-65929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - Unknown description CVE-2026-65929 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-61404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-63320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - Unknown description CVE-2026-63320 Note that Nessus relies on the presence of the package as reported by the vendor...