Lucene search
+L

96707 matches found

RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.10 views

rsync: rsync: Information disclosure and denial of service via crafted files-from entry

A flaw was found in rsync. Remote unauthenticated attackers can exploit a heap out-of-bounds write vulnerability by supplying a crafted files-from entry. This entry, containing both an interior and trailing backslash, causes the addimpliedinclude function to under-count the trailing backslash whe...

8.8CVSS6.5AI score0.0057EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Information disclosure and denial of service via crafted files-from entry

A flaw was found in rsync. Remote unauthenticated attackers can exploit a heap out-of-bounds write vulnerability by supplying a crafted files-from entry. This entry, containing both an interior and trailing backslash, causes the addimpliedinclude function to under-count the trailing backslash whe...

8.8CVSS6.5AI score0.0057EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

8.4CVSS6.5AI score0.00238EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/14 7:10 p.m.8 views

MiniPlasma-Runner

MiniPlasma-Runner Nightmare-Eclipse/MiniPlasma CVE-2020-17103 の修正版で、C2使用に適合させたもの。 元のPoCはディスクからのみ動作します。このバージョンはexecute-assemblyを介してメモリ上で完全に動作し、検出を回避するために分割バイナリアプローチを採用しています。 免責事項...

7.8CVSS7.7AI score0.26527EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/14 3:47 p.m.10 views

CVE-2025-9491_POC

CVE-2025-9491 LNK 難読化 PoC Windows ショートカット(.lnk)ファイルの脆弱性(ZDI-CAN-25373 / CVE-2025-9491)を実証する概念実証ツールです。このツールは、空白文字パディングを利用して悪意のあるコマンドライン引数を .lnk ファイル内に隠す方法を示します。 このツールは教育目的および許可されたセキュリティテストの目的のみで提供されています。 コンピュータシステムへの不正アクセスは違法です。このツールは、自分が所有しているか、明示的なテスト許可を得ているシステムでのみ使用してください。 目次 説明 脆弱性の詳細 インストール...

7.8CVSS7.6AI score0.68864EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/14 3:32 p.m.6 views

Dirty-Pipe-CVE-2022-0847

Dirty-Pipe-CVE-2022-0847 CVE-2022-0847(Dirty Pipe)は、任意の読み取り専用ファイル(例: /etc/passwd、/etc/shadow)を変更または上書きすることで権限昇格を可能にする、任意ファイル上書きの脆弱性です。 手順 1. gcc cve-2022-0847-exploit.c -o cve-2022-0847-exploit を使用してコンパイルします。 2. ./cve-2022-0847-exploit でエクスプロイトを実行します。 免責事項 私は本脆弱性の発見またはコードに対する功績を一切主張するものではありません。...

7.8CVSS7.4AI score0.89721EPSS
SaveExploits102
Kitploit
Kitploit
added 2026/09/14 3:05 p.m.7 views

CVE-2023-30367-mRemoteNG-password-dumper

mRemoteNG = v1.77.3.1784-NB パスワードダンパー CVE-2023-30367 Multi-Remote Next Generation Connection Manager(mRemoteNG)は、ユーザーがシステムにリモート接続するためのマルチプロトコル接続設定を保存・管理できるフリーソフトウェアです。 mRemoteNGの設定ファイルは、ディスク上で暗号化された状態で保存することができます。mRemoteNG バージョン = v1.76.20 および = 1.77.3-dev...

7.5CVSS7.3AI score0.0048EPSS
SaveExploits4References5
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.3 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iouring: fixed the memory leak related to the uid during file registration. When there are no files for iosqefilesscm to process within a certain range, it will free all resources and return. However, it forgot to set the uid...

5.5CVSS6.2AI score0.00259EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.16 views

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick’s MagickCore/resize.c file. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, specifically a division by zero in mathematics. This likely results in a disruption to the application’s functionality, but it may als...

4.3CVSS6.5AI score0.00925EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability in openjpeg2

A heap-buffer overflow was discovered in the way openjpeg2 handles certain PNG format files. An attacker could exploit this flaw to cause an application to crash, or in some cases to execute arbitrary code with the permission of the user running such an application...

7.8CVSS7.6AI score0.02008EPSS
SaveExploits1References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick, specifically in the code file coders/hdr.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned char. This likely leads to a disruption in the...

5.5CVSS6.6AI score0.01104EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in FontForge

Splinefont in FontForge, with a version number of 20230101, allows for command injection through crafted archives or compressed files...

6.5CVSS6.4AI score0.0187EPSS
SaveExploits2References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Python-Django

Django versions prior to 2.2.24, 3.x prior to 3.1.12, and 3.2.x prior to 3.2.4 have a potential issue with directory traversal through django.contrib.admindocs. Staff members could use the TemplateDetailView view to check the existence of arbitrary files. Additionally, if and only if the default...

4.9CVSS6.6AI score0.02737EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in openimageio

There are multiple denial-of-service vulnerabilities in the image output closing functionality of the OpenImageIO Project’s OpenImageIO v2.4.4.2. specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious inputs to exploit these...

5.9CVSS7.4AI score0.01266EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in grub2

The GRUB2’s shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules being loaded in GRUB2, thereby breaking the secure boot trust-chain...

7.8CVSS7.4AI score0.00313EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.12 views

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process could perform arbitrary chmod operations on the target...

6.7CVSS6AI score0.02421EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.13 views

Astra Linux – Vulnerabilities in Python 2.7, Python 3.7, and Pypy

A XXE issue was discovered in Python through version 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to prevent XML vulnerabilities...

9.8CVSS7.3AI score0.05065EPSS
SaveExploits3References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability in Thunderbird, Firefox

An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages. This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects Firefox 108, Firefox ESR 102.6, and...

8.6CVSS8.2AI score0.00772EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in emacs

In Emacs versions before 29.3, the Org mode considers the contents of remote files to be trustworthy. This affects Org Mode in versions prior to 9.6.23...

7.1CVSS7.3AI score0.00482EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in libzstd

Starting from v1.4.1 and before v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and immediately restricted those permissions afterward. As a result, the output files could temporarily be readable or writable by...

4.7CVSS4.8AI score0.00346EPSS
SaveExploits0References1
Rows per page
Query Builder