dirty_sock

dirtysock: Élévation de privilèges Linux via snapd En janvier 2019, les versions actuelles d'Ubuntu Linux se sont révélées vulnérables à une élévation de privilèges locale due à un bogue dans l'API snapd. Ce dépôt contient la POC d'exploit originale, mise à disposition pour la recherche et...

Akram El Assas bookcars 路径遍历漏洞

Bookcars is a car rental management platform developed by Akram El Assas. Version 8.3 of Bookcars contains a security vulnerability. This vulnerability stems from the/api/create-user component, which has an unlimited file renaming vulnerability. This could allow authenticated attackers to use...

CVE-2020-26878

Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API /service/v1/createUser endpoint, injecting arbitrary commands that will be executed as root user via web.py...