Network-Filesystem-Forensics

Netzwerk- und Dateisystemforensik Berichte über Post-Exploitation auf einem Honeypot, der die anfällige wu-ftpd ausnutzt CVE-2001-0550...

CVE-NetScalerFileSystemCheck

CVE-NetScalerFileSystemCheck Dieses Skript prüft den Citrix NetScaler, ob er durch CVE-2019-19781-Angriffe kompromittiert wurde, und sammelt alle Dateisysteminformationen. Die folgenden Dateien und Protokolle werden überprüft neueste Version 1.13: Vorlagenordner für XML-Dateien Apache...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Lokaler Privesc Betroffene Versionen Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Verwendung gcc exploit.c -o exploit chmod +x exploit ./exploit Beschreibung "Ubuntu-spezifisches Problem im OverlayFS-Dateisystem des Linux-Kernels,...

CVE-2026-90318

A flaw was found in the Linux kernel's FAT File Allocation Table filesystem, specifically within the Network File System NFS export path. The fatrebuildparent function fails to release a buffer head after successfully scanning a directory entry. This oversight can lead to a resource leak,...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 Scanner-Playbook Sehr einfaches Ansible-Playbook, das das Dateisystem nach JAR-Dateien durchsucht, die für Log4Shell CVE-2021-44228 anfällig sind. Das Ergebnis wird in einer CSV-Datei im lokalen System gespeichert. Ausführung Ein Wert für den Namen der CSV-Datei muss über die...

CVE-2025-6019-exploit

CVE-2025-6019: Exploit di escalation dei privilegi tramite ridimensionamento del filesystem UDisks2 Dettagli della vulnerabilità ID CVE : CVE-2025-6019 Impatto : Escalation locale dei privilegi LPE Sistemi interessati : Sistemi Linux con versioni vulnerabili di udisks2 Meccanismo : Una condizione...

CVE-2023-0386

Installation make all Verwendung Starten Sie zwei Terminals und geben Sie im ersten ein: ./fuse ./ovlcap/lower ./gc Geben Sie im zweiten Terminal ein: ./exp...

CVE-2025-6019-udisks-lpe-no-image

CVE-2025-6019-udisks-lpe-no-image Nur-Skript-Privilege-Escalation-Kette unter Verwendung von CVE-2025-6019 und UDisks2 kein Dateisystem-Image enthalten. Credits, Kontext & Exploit-Kette Dieses Repository führt keine neue Schwachstelle ein. Die hier implementierte Privilege-Escalation-Technik...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed error handling in ext4fcrecordmodified inode. The current code does not properly handle the krealloc error case, which could lead to silent memory corruption or a kernel bug. This patch addresses this issue...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ext4: fixed the bug in estreesearch caused by a faulty quota inode We have the following issues: ===================================== Kernel bug in fs/ext4/extentsstatus.c:202! Invalid opcode: 0000 1 PREEMPT SMP CPU: 1 PID: 8...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: jfs: Nlink overflow in jfsrename If nlink is maximal for a directory -1, and within that directory you perform a rename on a child directory without moving it from the parent directory, then the nlink value of the first directory...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Remove WARNON from functionfsbind This commit addresses an issue related to a kernel panic that occurs when paniconwarn is enabled. The issue is caused by the unnecessary use of WARNON in functionfsbind, which c...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: hwmon: When the current fan speed state is enforced from sysfs, a non-zero return value is generated. The minimum fan speed can be enforced from sysfs. For example, setting the current fan speed to 20 is used to ensure that the f...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the File System API of Google Chrome on Windows prior to version 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions through a crafted HTML page...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: sparc: Fixed inaccurate exception reporting in copyfromtouser for UltraSPARC III. Anthony Yznaga discovered that a bug in the ext4 code, where large amounts of data were allowed, resulted from copyfromuser returning impossibly...

Astra Linux – Vulnerability in WebKit2GTK

In BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit, prior to version 2.34.1, there was a limited bypass of the sandbox mechanism. This allowed a sandboxed process to trick host processes into believing that the sandboxed process was not confined by the sandbox. This was achieved by exploiting...

Astra Linux – Vulnerability in Chromium

Missing authorization in the FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and utilized social engineering to obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed an issue where inode lists were leaked during backref walking in findparentnodes. During backref walking, when findparentnodes is called, if we are dealing with a data extent and an error occurs while resolving...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: a potential memory leak has been fixed in ext4fcrecordregions. Since krealloc may return NULL, in this case, state-fcregions may not be freed by krealloc. However, state-fcregions is already set to NULL. This could lead to ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: gfs2: Fix for fiemap page faults In gfs2fiemap, we call iomapfiemap while holding the inode lock. This can lead to recursive locking if the fiemap buffer is memory-mapped to the same inode, and accessing it triggers a page...