bmcweb

OpenBMCウェブサーバー このコンポーネントは、OpenBMC向けの「何でもできる」組み込みウェブサーバーを目指しています。 機能 このウェブサーバーは、いくつかの異なるインターフェースを実装しています： DBusイベントウェブソケット。特定のdbusパスやプロパティの変更を登録でき、これらのフィルタに一致した場合にウェブソケットからイベントを送信します。 OpenBMC DBus REST API。dbusおよびそれが表すオブジェクトへの、直接的で干渉が少なく、忠実度の高いアクセスを提供します。 Serial:...

CVE-2021-3560

CVE-2021-3560 CVE-2021-3560のための信頼性の高いCベースのエクスプロイトです。 概要: 昨日、Kevin Backhouse氏によるこのブログ記事に出くわしました（この脆弱性を発見した方です）。そのブログ記事で提供されていたbashコマンドを試してみたところ、驚いたことに私のKali Linuxボックスで動作しました！...

polkit-auto-exploit

polkit-auto-exploit Polkit CVE-2021-3560 向け自動エクスプロイト PoC Summary CVE-2021-3560 は polkit における認証バイパスであり、非特権ユーザーが DBus を使用して特権メソッドを呼び出せるようにします。このエクスプロイトでは、accountsservice が提供する 2 つの特権メソッド（CreateUser と SetPassword）を呼び出します。これにより、特権ユーザーを作成してパスワードを設定し、最後に作成したユーザーとしてログインしてから root に権限昇格できます。...

AZL-105923 CVE-2026-94422 affecting package xdg-dbus-proxy 0.1.6-2

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

EUVD-2026-91646

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422

The xdg-dbus-proxy filtering proxy (versions before 0.1.9 ) contains an incorrect implementation of message filtering. An attacker can bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. This vulnerability could allow a malicious ...

POC-Bash-CVE-2021-3560

Bash-CVE-2021-3560 POC Bash -- CVE-2021-3560 Polkit ローカル権限昇格エクスプロイト このリポジトリは、多くの最近の Linux ディストリビューションに影響する polkit のローカル権限昇格の脆弱性である CVE-2021-3560 のための bash エクスプロイト を提供します。 !!!!!! テスト中は不安定になる可能性があります !!!!! 💥 脆弱性の概要 Kevin Backhouse によって発見されたこの脆弱性は、polkit の認証チェックを競合させることにより、非特権ユーザーが dbus...

[SECURITY] Fedora 44 Update: xdg-dbus-proxy-0.1.9-1.fc44

xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts...

Rocky Linux 8.6 [CIQ] Security Update: dbus / dbus-common / dbus-daemon / dbus-daemon-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0926)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260926 advisory. This advisory aggregates security fixes for the dbus SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-34969, CVE-2022-42010, CVE-2022-42012,...

Rocky Linux 8 [CIQ] Security Update: dbus / dbus-common / dbus-daemon / dbus-daemon-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_0096)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230096 advisory. dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets CVE-2022-42010 dbus: dbus-daemon can be crashed by...

Fedora 44 : xdg-dbus-proxy (2026-93f562a43f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-93f562a43f advisory. Update to 0.1.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

AlmaLinux 9.2 [TuxCare] Security Update: avahi / avahi-autoipd / avahi-compat-howl / avahi-compat-howl-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1743675732)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1743675732 advisory. - A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avah...

Rocky Linux 8 [CIQ] Security Update: avahi / avahi-autoipd / avahi-autoipd-debuginfo / avahi-compat-howl / etc (crlsa-2023_7190)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20237190 advisory. avahi: avahi-daemon can be crashed via DBus CVE-2023-1981 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

AlmaLinux 9.6 [TuxCare] Security Update: xdg-dbus-proxy (ALMALINUX9.6:CLSA-2026:1789126805)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789126805 advisory. - xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop...

Rocky Linux 8.6 [CIQ] Security Update: libvirt-dbus / libvirt-dbus-debuginfo / libvirt-dbus-debugsource Multiple Vulnerabilities (ciqsa-2026_0840)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260840 advisory. This advisory aggregates security fixes for the libvirt-dbus SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

AlmaLinux 9.2 [TuxCare] Security Update: xdg-dbus-proxy (ALMALINUX9.2:CLSA-2026:1789132992)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789132992 advisory. - xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop...