dirty_sock

dirtysock: Privilege Escalation su Linux tramite snapd A gennaio 2019, è stato scoperto che le versioni correnti di Ubuntu Linux erano vulnerabili a un'escalation locale dei privilegi a causa di un bug nell'API di snapd. Questo repository contiene il POC originale dell'exploit, reso disponibile p...

Akram El Assas bookcars 路径遍历漏洞

Bookcars is a car rental management platform developed by Akram El Assas. Version 8.3 of Bookcars contains a security vulnerability. This vulnerability stems from the/api/create-user component, which has an unlimited file renaming vulnerability. This could allow authenticated attackers to use...

CVE-2020-26878

Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API /service/v1/createUser endpoint, injecting arbitrary commands that will be executed as root user via web.py...