mimipenguin

MimiPenguin 2.0 Una herramienta para extraer la contraseña de inicio de sesión del usuario actual de escritorio Linux. Adaptada de la idea detrás de la popular herramienta de Windows mimikatz. Se le asignó CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Dato curioso: aún no se ha corregido...

CVE-2020-16125-Reproduction

CVE-2020-16125-Reproduction This repository is aimed at reproducing the attack . Description : Its original name is “Ubuntu gdm3 privilege escalation” , and it is found by a Github security researcher named Kevin Backhouse . Its CVSS score is 4.6/10 medium and the affected environment is Ubuntu...

CVE-2010-2387

CVE-2010-2387 Version: https://github.com/GNOME/gdm/tree/2799f52e01354944c0f464aa93bc5adfbc6bc0e8...

Ubuntu-Gnome-privilege-escalation

Ubuntu-Gnome-privilege-escalation A bash script exploit of CVE-2020-16126/CVE-2020-16127 to achieve privilege escalation. 一个可以方便实现Ubuntu本地提权的bash脚本（利用CVE-2020-16126/CVE-2020-16127漏洞），要求处于Gnome环境。 Affect version Ubuntu 20.04.1\20.10\18.04\16.04 LTS and so on Usage curl...

CVE-2026-74859

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

EUVD-2026-72673

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

CVE-2026-74859 Gnome-tweaks: path traversal in theme installer

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

CVE-2026-74859

gnome-tweaks contains a path traversal vulnerability in its shell theme installer. The installer extracts user-supplied ZIP archives without validating archive member paths, allowing a crafted theme archive to write files outside ~/.themes via ../ sequences, absolute paths, or symlink entries. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-74859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can...

CVE-2023-36250

CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...

CVE-2021-3560-PolkitPrivilegeEsclation

CVE-2021-3560-Polkit-Privilege-Esclation PoC Original research by Kevin Backhouse This is just a Bash PoC script, that automates the exploitation steps mentioned in Kevin Backhouse's blog. Read his post on this vulnerability:...

CVE-2026-83596

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server,...

Fedora 43 : epiphany (2026-e205f21e0d)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e205f21e0d advisory. Automatic update for epiphany-49.9.1-1.fc43. Changelog for epiphany Thu Aug 13 2026 Packit - 1:49.9.1-1 - Update to 49.9.1 upstream release Tenable...

[SECURITY] Fedora 43 Update: libsoup3-3.6.6-4.fc43

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

CVE-2026-43794

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

CVE-2026-65341

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdm (UTSA-2026-093028)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093028 advisory. gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu and...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: gnome-shell (UTSA-2026-032347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032347 advisory. It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a lock...

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before version 2.66.8. When the gfilereplace function is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly creates the target of the symlink as an empty file. This could potentially have security implications ...

Astra Linux – Vulnerability in gdk-pixbuf

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw-compressed stream of image data in GIF files, where the lzw minimum code size is equal to 12...