31 matches found
CVE-2026-82474: Protection Mechanism Failure
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...
Linux memfd_exec Evasion
Generate a Linux x64 ELF that decrypts a staged loader into memfdcreate and executes it with fexecve — fileless delivery effective against basic EDR. !/usr/bin/env python3 -- coding: utf-8 -- """ memfdcreate + fexecve fileless Linux loader. Builds an encrypted inner ELF loader, wraps it in an out...
Linux 3.17 noexec Bypass with Python ctypes and memfd_create Vulnerability
Exploit for linux platform in category local exploits Exploit Title: Linux = 3.17 noexec bypass with python ctypes and memfdcreate Date: 2015.10.14 Exploit Author: soyer Version: linux = 3.17 Tested on: Ubuntu 15.04 x8664 usage: $ ls -la execfile -rwxr-xr-x 1 soyer soyer 8600 Oct 14 15:04 execfil...
Linux Kernel 3.17 - 'Python ctypes and memfd_create' noexec File Security Bypass
Exploit Title: Linux = 3.17 noexec bypass with python ctypes and memfdcreate Date: 2015.10.14 Exploit Author: soyer Version: linux = 3.17 Tested on: Ubuntu 15.04 x8664 usage: $ ls -la execfile -rwxr-xr-x 1 soyer soyer 8600 Oct 14 15:04 execfile $ ./execfile bash: ./execfile: Permission denied $...
Linux Kernel 3.17 - Python ctypes and memfd_create noexec File Security Bypass
Linux Kernel 3.17 - Python ctypes and memfdcreate noexec File Security Bypass Exploit Title: Linux = 3.17 noexec bypass with python ctypes and memfdcreate Date: 2015.10.14 Exploit Author: soyer Version: linux = 3.17 Tested on: Ubuntu 15.04 x8664 usage: $ ls -la execfile -rwxr-xr-x 1 soyer soyer...
CVE-2014-3880
CVE-2014-3880 affects the FreeBSD kernel: executing a new image can destroy the calling process’s virtual memory space before all threads terminate, dereferencing an invalid page table pointer and triggering a triple fault leading to a reboot. Affected: FreeBSD 8.4 (before p11), 9.1 (before p14),...
CVE-2014-3880: Improper Input Validation
The 1 execve and 2 fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service triple-fau...
PT-2014-5572
Name of the Vulnerable Software and Affected Versions FreeBSD kernel versions prior to 8.4 p11 FreeBSD kernel versions prior to 9.1 p14 FreeBSD kernel versions prior to 9.2 p7 FreeBSD kernel versions prior to 10.0 p4 Description The issue allows local users to cause a denial of service, resulting...
Debian DSA-2952-1 : kfreebsd-9 - security update
Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or possibly disclosure of kernel memory. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-1453 A remote, authenticated attacker could cause the NF...
Debian Security Advisory DSA 2952-1 (kfreebsd-9 - security update)
Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or possibly disclosure of kernel memory. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-1453 A remote, authenticated attacker could cause the NFS...
