779 matches found
Vulnerable-Docker-Engine
CVE-2021-41091 Este exploit ofrece un análisis detallado de la vulnerabilidad de seguridad CVE-2021-41091 y proporciona una guía paso a paso sobre cómo utilizar el script de exploit para lograr una escalada de privilegios en un host. Resumen de la Vulnerabilidad CVE-2021-41091 es una falla en Mob...
CVE-2022-0847
CVE-2022-0847 Linux “Dirty Pipe” vulnerability gives unprivileged users root access...
GeoServer Demo Request Endpoint - Server Side Request Forgery
It is possible to achieve Server Side Request Forgery SSRF via the Demo request endpoint if Proxy Base URL has not been set. An unauthenticated user can supply a request that will be issued by the server, allowing enumeration of internal networks and, in the case of cloud instances, access to...
secpub
Cisco Nexus OS NX-OS - Problemas de "inyección" de comandos / saneamiento. Descubierto por: Peter Adkins [email protected] Acceso: Local; se requiere acceso autenticado. Seguimiento e identificadores: CVE - CVE-2011-2569 Sistemas operativos afectados: Cisco Nexus OS NX-OS Participación del...
cve-2024-31317
Exploration of CVE-2024-31317 CVE-2024-31317 provides unpriviledged access to any uid and SELinux scope available to proper Android apps. This provides access to uid 1000 system and uid 2000 shell, and can be triggered entirely from an unpriviledged app, allowing for persistence of any...
CVE-2023-2002
Bluetooth en Linux: Ejecución no autorizada de comandos de gestión CVE-2023-2002 Se ha encontrado una verificación de permisos insuficiente en el subsistema Bluetooth del kernel de Linux al manejar las llamadas al sistema ioctl de los sockets HCI. Esto provoca que tareas sin la capacidad adecuada...
CVE-2022-1972-infoleak-PoC
CVE-2022-1972 infoleak PoC Infoleak exploit for the CVE-2022-1972. You can find the associated write-up on our blog Requirements The user namespaces must be available for unprivileged users. root@kitploit: $ sysctl kernel.unprivilegedusernsclone kernel.unprivilegedusernsclone = 1 Build...
Linux Distros Unpatched Vulnerability : CVE-2026-89489
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: fix arbitrary kernel memory access via or1katomic syscall sysor1katomic syscall 244 in the or1k ABI takes two user pointers, v1 and v2, and swaps the...
serviceDetector
serviceDetector Detect whether a service is installed blindly and/or running if exposing named pipes on a remote machine without using local admin privileges. About In more detail, running this script connects to the target SMB service 445/tcp remotely and does the following: 1. Checks if the...
DEBIAN-CVE-2026-89489
In the Linux kernel, the following vulnerability has been resolved: openrisc: fix arbitrary kernel memory access via or1katomic syscall sysor1katomic syscall 244 in the "or1k" ABI takes two user pointers, v1 and v2, and swaps the words they point to in hand-written assembly. l.lwz r29,0r4 l.lwz...
CVE-2026-89698 nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage
In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsdgenlrqstp address fields to sockaddrstorage struct nfsdgenlrqstp declares rqdaddr and rqsaddr as plain "struct sockaddr" 16 bytes. When an IPv6 NFS client is connected, nfsdgenlrpcstatuscomposemsg casts these fiel...
CVE-2026-89698 nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage
In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsdgenlrqstp address fields to sockaddrstorage struct nfsdgenlrqstp declares rqdaddr and rqsaddr as plain "struct sockaddr" 16 bytes. When an IPv6 NFS client is connected, nfsdgenlrpcstatuscomposemsg casts these fiel...
EUVD-2026-76610
In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsdgenlrqstp address fields to sockaddrstorage struct nfsdgenlrqstp declares rqdaddr and rqsaddr as plain "struct sockaddr" 16 bytes. When an IPv6 NFS client is connected, nfsdgenlrpcstatuscomposemsg casts these fiel...
CVE-2026-89507
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmawritecmevent ctx-file may only be changed under the handler lock and the xalock, which is what stops uevents being queued for a ctx while ucmamigrateid moves it to another file. The CM core take...
CVE-2026-89489
CVE-2026-89489 affects the Linux kernel on the openrisc (or1k) architecture. The sys_or1k_atomic() syscall (number 244) swaps two user-supplied words via hand-written assembly without validating the pointers with access_ok() and without exception table entries for the four memory accesses. An unp...
EUVD-2026-76395
In the Linux kernel, the following vulnerability has been resolved: openrisc: fix arbitrary kernel memory access via or1katomic syscall sysor1katomic syscall 244 in the "or1k" ABI takes two user pointers, v1 and v2, and swaps the words they point to in hand-written assembly. l.lwz r29,0r4 l.lwz...
PT-2026-90414
In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd genl rqstp address fields to sockaddr storage struct nfsd genl rqstp declares rq daddr and rq saddr as plain "struct sockaddr" 16 bytes. When an IPv6 NFS client is connected, nfsd genl rpc status compose msg cast...
PT-2026-90106
In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decap and validate pulls the outer SRv6 headers and makes the inner packet the skb network header. The IPv6 control block still contains values collected while parsing the outer packet,...
CVE-2023-42791_CVE-2024-23666
Scripts de explotación de comprobaciones de autorización insuficientes en Fortimanager CVE-2024-23666 y carga de archivos sin restricciones CVE-2023-42791 Se proporcionan dos scripts de explotación que aprovechan estas vulnerabilidades: rce.py: Proporciona una reverse shell o añade un administrad...
