lehack-2026-challenge

LeHack 2026 Challenge Eine 3-stufige Challenge, die die Auswirkungen des direkten Einhängens von Datenträgern demonstriert. Challenge-Übersicht Ebene| Ziel| Technik ---|---|--- 1| Zugriff auf den unverschlüsselten Datenträger| Boot-Cmdline in grub auf init=/bin/bash setzen 2| LUKS von vault1...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the hostDisk process in the virt-handler component when mounting a host file or directory using the DiskOrCreate option. An attacker can gain unauthorized access to and modify...

The vulnerability of the FuseISO disk mounting software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the isofsrealreaddir function in the FuseISO mounting software occurs due to a stack overflow condition in the buffer. Exploiting this vulnerability can allow an attacker to cause service failure or execute arbitrary code terminate the application by using a long path name in...