CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox Prior to 7.0.16 is vulnerable to Local Privilege Escalation via Symbolic Link Following leading to Arbitrary File Delete and Arbitrary File Move. VirtualBox attempts to move log files as NT AUTHORITY\SYSTEM in C:\ProgramData\VirtualBox which all users can write to...

Sauercloude

Sauercloude 0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

vbox-vmdk-sparse-extent

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-vmdk-sparse-extent Write-up: https://abraxaslabs.tech/research/virtualbox-7-2-20-leftovers vbox-vmdk-sparse-extent Class: File read Reach: Local host UI:R Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle A host...

vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...

MassCyberCenter-Mentorship-Project-

MassCyberCenter-Mentorship-Project- Overview This repository documents my journey and deliverables during the MassCyber Center mentorship program. This mentorship program tasked us with completing a cybersecurity project and then presenting it at a showcase event attended by cybersecurity...

ricerca-tesi

thesis-research research resources for cve-2026-7228 Tools VirtualBox installation VirtualBox installation: https://www.virtualbox.org/wiki/Downloads Windows 11 ISO installation https://www.microsoft.com/it-it/software-download/windows11 Linux distro installation: lubuntu...

vbox-lsilogic-sas-config

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-lsilogic-sas-config Write-up: https://abraxaslabs.tech/research/virtualbox-7-2-20-leftovers vbox-lsilogic-sas-config Class: Type confusion / arb R/W Reach: Local guest Oracle VM VirtualBox OSS 7.2.20...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

Sauercloude

Sauercloude 0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119...

RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape for RealWorld CTF 2020/2021 Demo What? This is our solution for RealWorld CTF's "Box Escape" challenge from the 2020/2021 quals. Currently a 0day but we'll add the CVE number once there is one. CVE-2021-2119 How does it work? We wrote a...

vbox-ovf-nat-tftp-prefix

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-ovf-nat-tftp-prefix Write-up: https://abraxaslabs.tech/research/virtualbox-7-2-20-leftovers vbox-ovf-nat-tftp-prefix Class: File read Reach: Local guest after UI:R import Oracle VM VirtualBox OSS 7.2.20 f2792cf44...

CVE-2026-21986-VirtualBox-DoS

CVE-2026-21986 - VirtualBox Shared Folders Kernel Memory Exhaustion DoS Overview This repository contains a proof of concept and technical write-up for CVE-2026-21986, a denial-of-service vulnerability in Oracle VM VirtualBox. The issue exists in the Shared Folders driver interface and allows...

CVE-2024-21111

These binaries were built from source using mansk1es code. https://github.com/mansk1es/CVE-2024-21111 Prebuilt binaries for Privilege Escalation in Oracle VM Virtual box prior to 7.0.16...

Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019

Instructions for performing the vulnerability demonstration ISO LINK FOR THE VULNERABILITY Please download the following OS image openSUSE-Leap-15.6 using this link: https://download.opensuse.org/distribution/leap/15.6/iso/openSUSE-Leap-15.6-DVD-aarch64-Build710.3-Media.iso The image is...

CVE-2020-14293

CVE-2020-14293 This vulnerablity was discovered and disclosed by me. This repository will hold the advisory, vulnerable software and the exploits. This repository is only for educational purposes. Links Advisory SYSS-2020-025 Detailed writeup SySS Blog entry Exploit on Exploit-DB Vendor notice...

Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities

Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities This repository contains detailed documentation and code related to the exploitation, detection, and mitigation of two significant vulnerabilities: CVE-2020-0796 SMBGhost and Print Spooler. The repository showcases...

Linux Distros Unpatched Vulnerability : CVE-2026-87301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-87311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to explo...

Linux Distros Unpatched Vulnerability : CVE-2026-87322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable...