Dockerized-CVE-2019-14287

容器化的 CVE-2019-14287 针对 CVE-2019-14287 漏洞的容器化与可部署使用。更多信息请查看 README.md。 此 CVE 影响所有 sudo 低于 1.8.28 的版本，其中 sudo 用户可以通过引用其用户 ID 来提权至 root。 此 Dockerfile 允许构建此 CVE，例如可用于 CTF 和演示。 感谢 MuirlandOracle 就如何容器化此 CVE 联系我寻求帮助。MuirlandOracle 在 TryHackMe 上发布了一个房间，其中演示并解释了此 CVE——他非常出色地解释了其工作原理。...

CVE-2026-64370 posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in docpunanosleep error path In docpunanosleep, posixcputimercreate takes a pid reference via getpid and stores it in timer.it.cpu.pid. If the subsequent posixcputimerset call fails, the...

Linux Distros Unpatched Vulnerability : CVE-2022-50213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftables: do not allow SETID to refer to another table When doing lookups for sets on the same batch by using its ID, a set from a different table ca...

Bazaar Social Listing Shopping Web PHP Template 2.3.2 Privilege Escalation

==================================================================================================================================== | Title : Bazaar | Social Listing Shopping Web PHP Template v2.3.2 Privilege Escalation Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.P...

PT-2022-33931 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.16 through 5.15.60 Description: The issue concerns the netfilter nf tables, where SET ID is allowed to refer to another table, potentially leading to security vulnerabilities. The actual impact and attack plausibility...

libxml2: Use-after-free of ID and IDREF attributes

A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XMLPARSEDTDVALID option and without the XMLPARSENOENT option, resulting in a use-after-free issue...