uac

Colector de Artefactos Unix-like UAC Acerca de • Documentación • Características Principales • Sistemas Operativos Soportados • Uso • Contribuir • Soporte • Licencia 🔎 Acerca de UAC UAC Colector de Artefactos Unix-like es una herramienta poderosa y extensible de respuesta a incidentes diseñada pa...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

onionjuggler

OnionJuggler Gestor de servicios onion con muchas funciones para sistemas operativos tipo UNIX, escrito en shellscript compatible con POSIX OnionJuggler es una colección portátil de scripts y documentación de requisitos mínimos para ayudar al operador del servicio a hacer malabares gestionar sus...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

netzob

=========================================================== Netzob : Protocol Reverse Engineering, Modeling and Fuzzing .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 See complete documentation here:...

pwnKit

pwnKit Acerca de: Título: pwnKit Descripción: Escalada de privilegios en sistemas operativos tipo Unix AUTOR: drapl0n Versión: 1.0 Categoría: Escalada de Privilegios Objetivo: Sistemas operativos tipo Unix Modos de ataque: HID pwnKit es un payload de USB-Rubber-Ducky para escalada de privilegios,...

pkexec-exploit

pkexec-exploit Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Summary Polkit formerly PolicyKit is a component for controlling system-wide privileges in Unix-like operating systems. It provides an organized way for non-privileged processes to communicate with privileged ones Exploit...

CVE-2026-41450 UAC < 3.3.0 Command Injection via command_collector.sh

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the commandcollector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before being evaluated with eval. Attackers can...

GHSA-CVFF-V6V9-2F25 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17997 vulnerabilities

Vulnerabilities for packages: chromium...

Updated perl-DBI packages fix security vulnerabilities

The updated packages fix several security issues...

AWS CLI: Overly permissive File Permissions

Summary The AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host...

EUVD-2026-41116

AWS CLI: Overly permissive File Permissions...

CVE-2026-55639

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

CVE-2026-64075

In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregisterfprobe to wait for RCU grace period Commit 4346ba1604093 "fprobe: Rewrite fprobe on function-graph tracer" changed fprobe to register struct fprobe to an rcu-hlist, but it forgot to wait for RCU GP. Thus the...

CVE-2026-63856

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v2.0 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

CVE-2026-63887

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput concatenates "key=value\0" records into login-rspbuf, an 8192-byte kzallocMAXKEYVALUEPAIRS buffer allocated in iscsitallocloginsetupbuffer...

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the fact that it allows for arbitrary code to be executed by writing beyond the buffer boundaries in memory.

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-15133 vulnerabilities

Vulnerabilities for packages: chromium...

The vulnerability of OSPF traffic analyzer and TLV segment routing analysis in the software for network routing on Unix-like systems allows attackers to cause service interruptions.

The vulnerability of OSPF traffic analyzer and TLV segment routing analysis tools used in Unix-based systems for network routing implementation is related to integer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures...