lxd-group-privesc-report

LXD Root Escalada local de privilegios a root mediante la membresía predeterminada del grupo lxd y el paquete lxd-installer en Ubuntu. La demo se ejecuta en AWS EC2 Ubuntu Server 26.04 El fallo es que la instalación predeterminada de Ubuntu Server 26.04 concede silenciosamente al usuario principa...

raven

Raven C2 externo de CobaltStrike para Websockets Información adicional: https://www.cobaltstrike.com/help-externalc2 Compilación del servidor Ubuntu Copia la carpeta del servidor a tu VPS. Ejecuta ./setup.sh como root o con sudo. Compilación del cliente Windows Copia la carpeta del cliente a un...

ssh-enum

ssh-enum Estudio de Validación Estadística de CVE-2016-6210 Una reinvestigación reproducible de la enumeración de nombres de usuario de OpenSSH mediante análisis estadístico. Este proyecto reinvestiga CVE-2016-6210 , un canal lateral de temporización documentado de OpenSSH, para determinar si sig...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Verifica CVE-2020-11932 y prueba si el host está relacionado con esta vulnerabilidad Uso Descarga git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh Con curl sin descarga bash curl -s...

my-cve-2021-4034-poc

my-cve-2021-4034-poc my PoC quick and dirty code as uni has me busy, works on my ubuntu server...

wongpress

Explotación en un Caso Real de Desbordamiento de Búfer y Vulnerabilidades de Cadena de Formato para Obtener RCE en un Servidor Ubuntu CVEs Relacionados CVE-2024-2961 : Vulnerabilidad de desbordamiento de búfer en la función iconv de Glibc CVE-2024-29510 : Vulnerabilidad de cadena de formato en...

Exploit for Protection Mechanism Failure in Artifex Ghostscript

Real Case Exploitation of Buffer Overflow & Format String Vuln...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CopyFail-Fix 🌐 English | Português |...

UBUNTU-CVE-2026-33610

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it...

Canonical Subiquity 安全漏洞

Canonical Subiquity is an Ubuntu server installation program developed by the British company Canonical. Version 24.04.4 of Canonical Subiquity contains a security vulnerability, which stems from improper handling of crash reports and could lead to the exposure of sensitive credentials...

Exploit for Race Condition in Canonical Ubuntu_Linux

Privilege Escalation using the Dirty Cow Kernel Exploit By...

CVE-2019-12164

ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...

EUVD-2020-4269

Malware in sbrugna...

EUVD-2019-3813

Malware in sbrugna...

EUVD-2023-57848

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-11932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered. CVE-2020-11932 Note that Ness...

Exploit for CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, w...

USN-7314-1: Kerberos vulnerabilities

It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. CVE-2024-26458, CVE-2024-26461 It was discovered that Kerberos incorrectly handled certain memory...

Ubuntu 20.04 LTS / 22.04 LTS / 24.10 : nginx vulnerability (USN-7285-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7285-1 advisory. It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address and port. An attacker...

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...