linux-basics-for-hackers-notes

Linux Basics for Hackers — Course A structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb. Each module breaks down the core concepts, commands, and practical examples in plain English — straightforward enough for beginners, detailed enough to...

wphardening

WPHardening Fortalezca la seguridad de cualquier instalación de WordPress. ❮ NOTA ❯ Esta herramienta publica nuevas versiones de forma regular. Asegúrese de actualizar sus dependencias con frecuencia para obtener la última versión. Consulte el registro de cambios o CHANGELOG.md para conocer las...

CVE-2025-2502

Encontrado accidentalmente mientras se aprendía sobre escalada de privilegios locales. En cualquier versión de Lenovo PC Manager, las herramientas de Lenovo PC Manager tienen un defecto de permisos. Siempre que se descargue una herramienta, los usuarios normales tienen permiso F permiso completo...

CVE-2025-57392

CVE-2025-57392 🔒 Security Vulnerability Report Product: BenimPOS Desktop V3.0 Vulnerability Type: Insecure File Permissions Affected Components: BenimPOS.exe, unins000.exe, System.Data.SQLite.dll Vulnerability Class: CWE-276: Incorrect Default Permissions Proof of Concept by: Fatih Bülbül Test...

EUVD-2026-89183

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

CVE-2022-0997

Fidelis Network and Deception - CVE-2022-0997 - Insecure File Permissions Privilege Escalation Releasability and Acknowledgements The exploit was approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approving the...

ansible-mysql-cve-2016-6662

ansible-mysql-cve-2016-6662 Simple ansible playbook to patch mysql servers against CVE-2016-6662. UPDATE 20160915.2347.CEST: Kenny informed me of Patrick Forsberg's catch that the original patch did not safeguard against ../ abuse. I've now replaced the patch with one that is more stringent based...

CVE-2022-3328

CVE-2022-3328 CVE-2022-3328 con CVE-2022-41974 y CVE-2022-41973 de: https://www.qualys.com/2022/11/30/cve-2022-3328/advisory-snap.txt https://blog.qualys.com/vulnerabilities-threat-research/2022/11/30/race-condition-in-snap-confines-mustmkdirandopenwithperms-cve-2022-3328...

CVE-2022-0486

Fidelis Network and Deception - CVE-2022-0486 - Insecure File Permissions Privilege Escalation - Multiple Releasability and Acknowledgements All exploits were approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approvin...

CVE-2022-0847-Docker

Dirty Pipe CVE-2022-0847: A Hands-On Exploit Demonstration in Docker This repository provides a self-contained, interactive Docker environment to safely demonstrate and analyze the "Dirty Pipe" privilege escalation vulnerability. It is designed as an educational tool for security professionals to...

CVE-2025-27581

CVE-2025-27581 Exploit scripts for CVE-2025-27581 BasicExploit.sh This just points the exploit to a file of your choice, it should set your target file to 0666 permissions but it can fail on certain files depending on applocker policies or selinux. CreateFakeRoot.sh This points the exploit to...

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP Local Privilege Escalation Windows 📌 Overview CVE-2020-11107 is a Local Privilege Escalation LPE vulnerability affecting Apache Friends XAMPP on Windows. An unprivileged user can modify the XAMPP Control Panel configuration file xampp-control.ini and replace the default...

CVE-2023-46870

CVE-2023-46870 Nordic Semiconductor nRF Sniffer for Bluetooth LE versions 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have incorrect file permissions set, which allows adversaries to perform privilege escalation and code execution by modifying bash and python scripts. Keywords: Local Privilege Escalati...

BIT-COMPOSER-2026-59944 Composer: CVE-2026-59946 fix bypass via symlinked package bin path

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the earlier CVE-2026-59946 binary-path hardening because Composer validates literal parent-directory segments only during dependency resolutio...

CVE-2021-4034

CVE-2021-4034 Exploit Usage $ git clone https://github.com/Anonymous-Family/CVE-2021-4034.git $ cd CVE-2021-4034 $ make ! CVE-2021-4034 Exploit By whokilleddb ! Initializing Setup + Setup Done :D ! Setting Root Privileges ! Launching Root Shell /bin/whoami root Rough Patch chmod 0755 which pkexec...

MCP Atlassian: Insecure File Permissions on OAuth Token Storage

Summary The OAuth token fallback file storage in OAuthConfig.savetokenstofile creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obtain...

CVE-2026-77268

The MCP Atlassian Model Context Protocol server for Confluence and Jira is vulnerable to insecure file permissions in versions prior to 0.22.0 . The application creates the OAuth fallback token directory and JSON file without explicit owner-only modes. This allows local users or processes with gr...

CVE-2026-77268 MCP Atlassian: Insecure File Permissions on OAuth Token Storage

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth fallback token directory and JSON file are created without explicit owner-only modes. Local users or processes with access through the resulting group or world permission bi...

CVE-2026-77268 MCP Atlassian: Insecure File Permissions on OAuth Token Storage

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth fallback token directory and JSON file are created without explicit owner-only modes. Local users or processes with access through the resulting group or world permission bi...

EUVD-2026-82595

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.9.3.1021, Acronis Backup extension for Plesk Linux before build 1.8.11.638, Acronis Backup plugin for DirectAdmin Linux before build...