Dirty-COW-CVE-2016-5195-

Dirtyc0w Docker POC Requisitos previos: Vagrant instalado Cómo usar Primero clona el proyecto git clone https://github.com/BrolyCode/Dirty-Cow.git Entra en la carpeta cd Dirty-Cow Luego levanta el entorno con el comando root@kitploit: vagrant up Una vez que el servidor esté construido, nos...

CVE-2021-43798

CVE-2021-43798 Directory Traversal y Lectura Arbitraria de Archivos en Grafana Authors: Wagner Alves - Analista de Red Team Este exploit aprovecha las vulnerabilidades de Directory Traversal y lectura arbitraria de archivos en Grafana 8.0 - 8.3, lo que permite leer archivos como /etc/passwd,...

CVE-2021-43798

CVE-2021-43798 root@kitploit: ┌─✗─s1gh@parrot─/Desktop └──╼ $ python3 grafanapathtraversal.py -H "http://example-url:3000" Read file /etc/passwd root:x:0:0:root:/root:/bin/ash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin...

wordpress-snapcreek

wordpress-snapcreek snapcreekduplicator 文件读取漏洞 https://www.cvedetails.com/cve/CVE-2020-11738/ 步骤1： 打开 MSFconsole：并使用 wordpressscanner 扫描目标机器使用的所有插件。 步骤2： 使用 python 脚本进行攻击： 在攻击机上升级/安装 pip3 Sudo apt install python3-pip sudo pip3 install requsts 安全影响： /etc/passwd 文件本身并不特别敏感，因为它不包含实际密码（这些密码在...

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.31 packages and security update

Red Hat OpenShift Container Platform release 4.21.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 用于演示 CVE-2021-41773 的 PoC，附带 docker 环境 运行 直接运行 ./poc.sh。请确保你已安装可用的 docker 和 docker-compose root@kitploit: $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1 ... done root:x:0:0:root:/root:/bin/bash...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.36 packages and security update

Red Hat OpenShift Container Platform release 4.20.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...

MegaHiDocker

MegaHiDocker 本项目将利用一些具有类似漏洞代码（CVE-2020-35191）的 Docker 容器进行攻击，但此次针对的是其他容器。 = 请阅读 Description.txt 文件 要求： 1. 需要在你的 Linux 中安装 Docker，并为 Python 3.X 安装 subprocess 模块。 2. 你需要拉取你的容器，然后运行此代码（例如：docker pull ） 漏洞影响： 1. CVSS：9.8 严重 2. 影响代码执行：是 3. 影响拒绝服务：是 4. 影响权限提升：是 5. 影响信息泄露：是 6. 受影响组件：/etc/shadow 受影响软件：...

CVE-2020-25223

CVE-2020-25223 一个用于针对受影响的 Sophos UTM 测试 CVE-2020-25223 的 PoC 脚本。 给定一个 IP 地址，该脚本会尝试下载设备 /etc/shadow 文件的副本。 原始研究：https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

RHCOS 4 : OpenShift Container Platform 4.20.36 (RHSA-2026:60444)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60444 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...

RHCOS 4 : OpenShift Container Platform 4.21.31 (RHSA-2026:60449)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60449 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: targetcli (UTSA-2026-093622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093622 advisory. Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files. Tenable has extracted the preceding...

Red Hat Libuser Race Condition Vulnerability

Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation...

CVE-2026-41451

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parseartifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via eval...

CVE-2026-41451 UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parseartifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via eval...

CVE-2026-41451 UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parseartifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via eval...

CVE-2026-41451

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh . Usernames and home directories read from /etc/passwd are substituted directly into command strings without escaping before execution via ...