24 matches found
CVE-2024-48990-Exploit
CVE-2024-48990 Exploit Mi artículo completo sobre cómo llegué a redescubrir este N-day y a crear mi propio exploit para él se puede encontrar en mi blog. Básicamente, puedes git clone este repositorio en un directorio controlado por el atacante, export PYTHONPATH=, y luego ejecutar main.py con es...
CVE-2024-48990
This repository does not have a README...
CVE-2024-48990-PoC-Testing
CVE-2024-48990-PoC-Testing 🐍🔓 This repository contains a Proof of Concept PoC to demonstrate a vulnerability in theneedrestart program, which fails to set Python's path correctly, leading to potential privilege escalation. The PoC highlights a potential path for gaining elevated privileges by...
npm_poisoning_poc
Guardians 2027 AI package lab Reusable setup for the first Gu...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990-PoC What is needrestart and how does it wor...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-4...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploi...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 - Needrestart 3.7-3 Privilege Escalation Exploi...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 introdution This vulnerability takes advant...
CLSA-2024-1734028058 Fix CVE(s): CVE-2024-11003, CVE-2024-48990, CVE-2024-48991, CVE-2024-48992
SECURITY UPDATE: Prevent running the Python interpreter with an attacker-controlled PYTHONPATH environment variable - debian/patches/CVE-2024-48990-CVE-2024-48991.patch: do not set PYTHONPATH environment variable to prevent a LPE and prevent race condition on /proc/$PID/exec evaluation -...
Ubuntu: Security Advisory (USN-7117-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 Exploit My full writeup for how I came to re-...
Fedora 39 : needrestart (2024-6015ee69f0)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6015ee69f0 advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Fedora: Security Advisory (FEDORA-2024-d2124788a8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 41 : needrestart (2024-a9cf3dad4f)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a9cf3dad4f advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
needrestart Local Privilege Escalation Vulnerability
LPEs in needrestart CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 ======================================================================== Contents ======================================================================== Summary Background CVE-2024-48990 and...
needrestart Local Privilege Escalation
Qualys Security Advisory LPEs in needrestart CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 ======================================================================== Contents ======================================================================== Summary...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 Exploit for CVE-2024-48990 Local Privilege Esc...
CVE-2024-48990
creationtimestamp| type| source ---|---|--- 2024-11-20 18:45:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9102 2024-11-21 13:05:05+00:00| seen| https://t.me/truesecator/6456 2024-11-22 00:03:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9121 2024-11-22...