docker-POC_CVE-2024-1086

https://github.com/Notselwyn/CVE-2024-1086 usage root@kitploit: docker compose up -d --build docker exec -it poccve20241086 bash test sample root@kitploit: tester@e23a4e5757d9 CVE-2024-1086$ id uid=99999tester gid=99999tester groups=99999tester tester@e23a4e5757d9 CVE-2024-1086$ cat /etc/shadow...

CVE_2024_1086_vulnerability_check

此存储库没有 README。...

CVE-2024-1086-checker

CVE-2024-1086-checker 这是一个简单的检查脚本，用于检测容易被利用的内核配置。如果本脚本返回“内核配置不易受攻击”，仅表示该漏洞无法通过当前已知的攻击路径利用。 使用方法 root@kitploit: curl -s "https://raw.githubusercontent.com/kevcooper/CVE-2024-1086-checker/main/checkcve20241086.py" | python3 root@kitploit: git clone...

CVE-2024-1086

CVE-2024-1086...

onetwoseven-writeup

HTB OneTwoSeven — 完整通关攻略 针对已退役的 HackTheBox Linux 机器 OneTwoSeven 的完整端到端通关攻略。完整链路：确定性凭据生成 → SFTP chroot 符号链接逃逸 → vim 交换文件恢复 → SSH 端口转发至受防火墙保护的管理面板 → 绕过被注释掉的 Apache 重写规则 → RCE → 利用 CVE-2024-1086 （nftables UAF）获取 root。 核心亮点： “已禁用”的插件上传并未真正禁用——插件管理器的 switch 匹配的是 REQUESTURI，因此可以借助 处于活动状态...

CVE-2024-1086_Ausarbeitung

This repository does not have a README...

CVE-2024-1086

このリポジトリには README がありません。...

Photon OS 5.0: Linux PHSA-2024-5.0-91-0206

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0206. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Exploit for Race Condition in Canonical Ubuntu_Linux

KernelPWNED - Kernel Exploit Suggester A lightweight, fast ke...

CVE-2024-1086 affecting package kernel for versions less than 6.6.22.1-2

CVE-2024-1086 affecting package kernel for versions less than 6.6.22.1-2. A patched version of the package is available...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2024-1086 For learning purpose. Refer: - https://pwning...

Security Bulletin: IBM Security Guardium is affected by a Kernel vulnerability (CVE-2024-1086, CVE-2024-26602)

Summary IBM Security Guardium has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2024-1086 DESCRIPTION: Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by use-after-free flaw in the nftverdictinit function in...

Photon OS 4.0: Linux PHSA-2024-4.0-0565

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0565. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-2002)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2024-1086 Universal local privilege escalation Proof-of-C...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-1086)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1086 advisory. - A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achiev...

Debian dla-3841 : linux-config-5.10 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3841 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3841-1 [email protected]...

Security Bulletin: IBM MQ Appliance is affected by multiple open source vulnerabilities.

Summary IBM MQ Appliance has addressed multiple open source vulnerabilities CVE-2020-12762, CVE-2021-33631, CVE-2023-6931, CVE-2024-1086. Vulnerability Details CVEID:CVE-2020-12762 DESCRIPTION: json-c could allow a remote attacker to execute arbitrary code on the system, caused by an integer...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.5.6)

The version of AOS installed on the remote host is prior to 6.5.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.5.6 advisory. - CVE-2023-38546 is a cookie injection vulnerability in the curleasyduphandle, a function in libcurl that duplicates easy handles...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...