23 matches found
CVE-2024-48990-Exploit
CVE-2024-48990 Exploit My full writeup for how I came to re-discovering this N-day and creating my own exploit for it can be found on my blog. Essentially, you can git clone this repository into an attacker-controlled directory, export PYTHONPATH=, and then run main.py with that PYTHONPATH value...
CVE-2024-48990-PoC-Testing
CVE-2024-48990-PoC-Testing 🐍🔓 Dieses Repository enthält einen Proof of Concept PoC , um eine Schwachstelle imneedrestart-Programm zu demonstrieren, die den Python-Pfad nicht korrekt setzt, was zu potenzieller Rechteausweitung führt. Der PoC zeigt einen möglichen Weg zur Erlangung erhöhter...
CVE-2024-48990
Questo repository non contiene un README...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990-PoC What is needrestart and how does it wor...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-4...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploi...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 - Needrestart 3.7-3 Privilege Escalation Exploi...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 introdution This vulnerability takes advant...
CLSA-2024-1734028058 Fix CVE(s): CVE-2024-11003, CVE-2024-48990, CVE-2024-48991, CVE-2024-48992
SECURITY UPDATE: Prevent running the Python interpreter with an attacker-controlled PYTHONPATH environment variable - debian/patches/CVE-2024-48990-CVE-2024-48991.patch: do not set PYTHONPATH environment variable to prevent a LPE and prevent race condition on /proc/$PID/exec evaluation -...
Ubuntu: Security Advisory (USN-7117-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 Exploit My full writeup for how I came to re-...
Fedora 39 : needrestart (2024-6015ee69f0)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6015ee69f0 advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Fedora 41 : needrestart (2024-a9cf3dad4f)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a9cf3dad4f advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Fedora: Security Advisory (FEDORA-2024-d2124788a8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
needrestart Local Privilege Escalation Vulnerability
LPEs in needrestart CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 ======================================================================== Contents ======================================================================== Summary Background CVE-2024-48990 and...
needrestart Local Privilege Escalation
Qualys Security Advisory LPEs in needrestart CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 ======================================================================== Contents ======================================================================== Summary...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 Exploit for CVE-2024-48990 Local Privilege Esc...
CVE-2024-48990
creationtimestamp| type| source ---|---|--- 2024-11-20 18:45:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9102 2024-11-21 13:05:05+00:00| seen| https://t.me/truesecator/6456 2024-11-22 00:03:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9121 2024-11-22...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
PoC for CVE-2024-48990 in needrestart educational purpose...
Ubuntu: Security Advisory (USN-7117-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...