ssh-enum

ssh-enum Statistische Validierungsstudie von CVE-2016-6210 Eine reproduzierbare Neuuntersuchung der OpenSSH-Benutzernamensaufzählung mittels statistischer Analyse. Dieses Projekt untersucht CVE-2016-6210 , einen dokumentierten OpenSSH-Zeit-Seitenkanal, erneut, um festzustellen, ob er auf einem...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Verifique CVE-2020-11932 e teste o host relacionado a esta vulnerabilidade Uso Download root@kitploit: git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh Com curl sem download root@kitploit: bash curl -s...

raven

Raven C2 esterno CobaltStrike per Websockets Informazioni aggiuntive: https://www.cobaltstrike.com/help-externalc2 Build del server Ubuntu Copia la cartella del server sul tuo VPS. Esegui ./setup.sh come root o con sudo Build del client Windows Copia la cartella del client su un host di sviluppo...

lxd-group-privesc-report

LXD Root Escalação de Privilégio Local para root através da associação padrão ao grupo lxd e do pacote lxd-installer no Ubuntu. Demonstração executada no AWS EC2 Ubuntu Server 26.04 O bug é que a instalação padrão do Ubuntu Server 26.04 concede silenciosamente ao usuário primário a associação ao...

wongpress

Exploração Real de Vulnerabilidades de Buffer Overflow e Format String para Obter RCE em Servidor Ubuntu CVEs Relacionados CVE-2024-2961 : Vulnerabilidade de buffer overflow na função iconv do Glibc CVE-2024-29510 : Vulnerabilidade de format string no Ghostscript interpretador da linguagem...

Exploit for Protection Mechanism Failure in Artifex Ghostscript

Real Case Exploitation of Buffer Overflow & Format String Vuln...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CopyFail-Fix 🌐 English | Português |...

UBUNTU-CVE-2026-33610

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it...

Canonical Subiquity 安全漏洞

Canonical Subiquity is an Ubuntu server installation program developed by the British company Canonical. Version 24.04.4 of Canonical Subiquity contains a security vulnerability, which stems from improper handling of crash reports and could lead to the exposure of sensitive credentials...

Exploit for Race Condition in Canonical Ubuntu_Linux

Privilege Escalation using the Dirty Cow Kernel Exploit By...

CVE-2019-12164

ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...

EUVD-2019-3813

Malware in sbrugna...

EUVD-2020-4269

Malware in sbrugna...

EUVD-2023-57848

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-11932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered. CVE-2020-11932 Note that Ness...

Exploit for CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, w...

USN-7314-1: Kerberos vulnerabilities

It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. CVE-2024-26458, CVE-2024-26461 It was discovered that Kerberos incorrectly handled certain memory...

Ubuntu 20.04 LTS / 22.04 LTS / 24.10 : nginx vulnerability (USN-7285-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7285-1 advisory. It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address and port. An attacker...

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...

About Elevation of Privilege – needrestart (CVE-2024-48990) vulnerability

About Elevation of Privilege - needrestart CVE-2024-48990 vulnerability. On November 19, Qualys released a security bulletin about five privilege escalation vulnerabilities in the needrestart utility CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 used in Ubuntu...