CVE-2021-4034

CVE-2021-4034 PwnKit 的 PoC：polkit 的 pkexec 中的本地权限提升漏洞 CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80 https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 PoC 已在 Debian 10 和 CentOS 7 上验证...

Kubernetes-1.12.3-all-auto-install

Kubernetes-1.12.3-all-auto-install 项目介绍 个人整理的Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 无 CVE-2018-1002105 漏洞的master,node节点全自动快速一键安装部署文件，适用于测试环境，生产环境的快速安装部署 参考文档 https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/ master节点安装准备工作 1. 配置好centos的网络环境，使其可连接互联网，用于下载安装文件 2...

CVE-2021-3156

exploit.py 从 @worawit 分支而来，更短且优化。仅在Centos7上的sudo=1.8.23版本有效。 同时在Web服务器和Linux机器上工作。 backdoor.php 通过weevely生成的php后门，密码："H@rmWsH4rE!"。如果成功上传到服务器，则提供以Apache身份访问ssh会话的权限。 shell.php%00.jpg Null-Byte php文件清理绕过。...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

iconvfix

iconvfix 用于修补 CVE-2024-2961 的 Bash 脚本 目前适用于 Centos7. 无保修, 请勿在生产系统上使用, 这只是一个内部辅助工具 : 用法 tsh ssh username@target sudo 'bash -s' iconvfix.sh...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

encrypted-linux-kernel-modules

ELKM：加密的 Linux x86-64 可加载内核模块 ELKM 提供了一种安全传输和加载加密可加载内核模块（LKM）的机制。其目的是保护基于内核的 rootkit 和植入程序不被端点检测与响应（EDR）软件发现，并抵消磁盘取证工具进行恢复所带来的影响。 RHEL/CentOS 7 ELKM 专为 RHEL/CentOS 7 x86-64 编写。 root@kitploit: kernel-tools-libs-3.10.0-1127.18.2.el7.x8664 kernel-devel-3.10.0-1127.18.2.el7.x8664...

CVE-2021-3156-centos7

CVE-2021-3156-centos7 利用sudo提权，只针对cnetos7 受影响版本： sudo: 1.8.2 - 1.8.31p2 sudo: 1.9.0 - 1.9.5p1 以非root用户登录系统，并运行如下命令： sudoedit -s / 回显是 not a regular file 多半是存在该漏洞 使用方法： 首先使用非root用户登录，然后将/etc/passwd里面所有的内容复制到CVE-2021-3156.py的APPENDCONTENT = b"""\n""";里面，将改普通用户的uid和gid都改成0然后运行CVE-2021-3156.py文件...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == 问题 客户有一台旧的 CentOS7 机器，已到达生命周期终点（EOL） CentOS7 运行的是较旧版本的 openssl，该版本受 link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 的影响 如何为旧的 CentOS7 上的 openssl 打补丁以修复该 CVE？ == 步骤 1. link:./docs/1.CVE-2021-3712-analysis.adoc使用 NVD、CVSS/EPSS 评分和 CISA KEV 数据对 CVE/漏洞进行分类 2...

Linux Distros Unpatched Vulnerability : CVE-2026-76925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerabili...

pac-exploits-priv

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulne...

Veeam Backup & Replication 13: Changes to Supported Linux Platforms

Article Applicability This article lists the specific Linux distributions and versions that will no longer be supported starting with Veeam Backup & Replication and Veeam Agent for Linux version 13. These lists are intended for customers currently running Veeam Backup & Replication 12.3 and Veeam...

EUVD-2018-9717

Malware in sbrugna...

EUVD-2025-20792

Malicious code in bioql PyPI...

EUVD-2025-20793

Malicious code in bioql PyPI...

CVE-2025-3497

The Linux distribution underlying the Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 is obsolete and reached end of life EOL on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product...

CVE-2025-27028

The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 can read the entire file system content, including files belonging to other users and having restricted access like, for example, the root password hash...

CVE-2025-3497 Radiflow iSAP Smart Collector Linux distribution unmaintained

The Linux distribution underlying the Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 is obsolete and reached end of life EOL on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product...

CVE-2025-27028

The CVE-2025-27028 entry concerns Radiflow iSAP Smart Collector (CentOS 7, VSAP 1.20). A deprivileged Linux user vpuser can read the entire filesystem, exposing restricted files (e.g., root password hash). Affected component is the file system access for vpuser; root cause details are not provide...

CVE-2025-27028 Read access of deprivileged Radiflow iSAP Smart Collector user

The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector CentOS 7 - VSAP 1.20 can read the entire file system content, including files belonging to other users and having restricted access like, for example, the root password hash...