CVE-2024-48990_needrestart

CVE-2024-48990 - Needrestart 3.7-3 特権昇格エクスプロイト 概要 このリポジトリには、Needrestart 3.7-3 の特権昇格脆弱性 CVE-2024-48990 のエクスプロイトが含まれています。このエクスプロイトは、不適切な入力処理を利用して、昇格した権限で任意のコードを実行します。 影響を受けるバージョン Needrestart 3.7-3 Debianベースのシステムでテスト済み 他のバージョンも影響を受ける可能性があります エクスプロイトの詳細 エクスプロイトは以下で構成されています: main.asm:...

CVE-2024-48990-PoC

Este simple script de shell debe crear todos los archivos necesarios para que esta vulnerabilidad funcione. Primero crea un archivo temporal generado aleatoriamente que se usará para compilar el archivo falso init.so. Cuando se activa la vulnerabilidad, este archivo se ejecutará y copiará el...

CVE-2024-48990

CVE-2024-48990 — needrestart 本地权限提升 通过 PYTHONPATH 注入，针对 Ubuntu/Debian 系统上 needrestart /environ 继承进程的完整环境 ——包括 PYTHONPATH。一个无特权的本地用户可以利用这一点： 1. 将 PYTHONPATH 设置为包含恶意 importlib 包的目录 2. 保持一个 Python 进程运行，以便 needrestart 在扫描时发现它 3. 等待 needrestart 执行——它会以 root 身份加载攻击者的 importlib/init.py 受影响版本 包| 受影响| 已修复...

CVE-2024-48990

CVE-2024-48990 こんにちは、これは0x3bsです。 被害マシン内: root@kitploit: set -e cd /tmp 1. Create the malicious module directory structure mkdir -p malicious/importlib 攻撃者マシンで 攻撃者マシンで lib.c をコンパイルするには: root@kitploit: gcc -shared -fPIC -o exp.so lib.c そして被害マシン内: /tmp 内 root@kitploit: chmod +x run.sh...

CVE-2026-5843

CVE-2026-5843 PoC 一个极简的 OCI 注册表，用于提供恶意模型，以利用 mlx-lm 中的 modelfile importlib 执行路径。当 Docker Model Runner 加载模型进行推理时，model.py 将以当前登录用户的身份在宿主机上执行。 要求： Docker Desktop ≤ 4.70.x（Apple Silicon）并启用 Model Runner 使用方法 root@kitploit: 1. Start the registry on the host python3 poccve20265843.py 2. From any...

-Linux-PrivEsc-CVE-2024-48990

Privesc-need-restart-2024-48990 漏洞利用说明 CVE-2024-48990 - Pure Python 该脚本通过劫持库路径（ PYTHONPATH hijacking ）利用 Linux 工具 needrestart 中的漏洞 CVE-2024-48990 。与原始攻击向量不同，此方法仅使用 Python，从而绕过了在目标机器上安装 gcc 等编译器的要求。 逐步工作原理 1. 目录结构： 创建目录 /tmp/malicious/importlib。这模仿了 Python 标准库的结构。 2. 恶意载荷（importlib/init.py）：...

CVE-2024-48990-PoC

PoC para CVE-2024-48990 en needrestart solo con fines educativos https://www.qualys.com/2024/11/19/needrestart/needrestart.txt ¿Cómo ejecutarlo? Ejecutar ./start.sh compilará la librería importlib falsa e iniciará un script que espera a que needrestart sea ejecutado por root. Después abrirá una...

CVE-2026-81662 Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...

CVE-2026-81662

Flowintel (versions ≥3.3.0 ) is vulnerable to Remote Code Execution via its alerts settings update endpoint. The root cause is improper handling of requester-supplied configuration keys: while values were normalized to Python literals, the keys themselves were injected directly into the source of...

CVE-2026-81662 Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...

PT-2026-68307

Name of the Vulnerable Software and Affected Versions praisonai versions 3.9.26 through 4.6.57 praisonaiagents versions 0.12.12 through 1.6.57 Description The workflow include feature allows for arbitrary Python code execution. The Workflow. execute include function implicitly imports and runs a...

CVE-2026-61536 Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE

Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.3, banks parses Tool JSON objects from the rendered body of % completion % blocks and later resolves their importpath field through importlib.importmodule... + getattr... to obtain the callable that...

CVE-2026-61446

PraisonAI praisonaiagents before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python .py files from project-level and user-home .praisonai/plugins/ directories using importlib specfromfilelocation and execmodule without code...

CVE-2026-61446

CVE-2026-61446 affects PraisonAI before 1.6.78. The plugin manager loads and executes arbitrary Python files from plugin directories using importlib and exec_module without code signing or sandboxing, enabling a local attacker who can write a malicious .py file to achieve arbitrary code execution...

CVE-2026-61446 PraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-Discovery

PraisonAI praisonaiagents before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python .py files from project-level and user-home .praisonai/plugins/ directories using importlib specfromfilelocation and execmodule without code...

CVE-2026-61437 PraisonAI before 1.6.78 Remote Code Execution via tools.py

PraisonAI pip package praisonaiagents before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow.resolvepydanticclass src/praisonai-agents/praisonaiagents/workflows/workflows.py. When a workflow step uses a string outputpydantic reference, the framework locates and imports...

EUVD-2026-42900

PraisonAI pip package praisonaiagents before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow.resolvepydanticclass src/praisonai-agents/praisonaiagents/workflows/workflows.py. When a workflow step uses a string outputpydantic reference, the framework locates and imports...

CVE-2026-61437

CVE-2026-61437 : PraisonAI (pip package praisonaiagents) prior to 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow.resolve_pydantic_class. When a workflow step uses a string output_pydantic reference, the framework imports a sibling tools.py from the workflow directory ...

PYSEC-2026-1372 Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Fickling's assessment ctypes, importlib, runpy, code and multiprocessing were added the list of unsafe imports https://github.com/trailofbits/fickling/commit/9a2b3f89bd0598b528d62c10a64c1986fcb09f66, https://github.com/trailofbits/fickling/commit/eb299b453342f1931c787bcb3bc33f3a03a173f9,...

CVE-2026-5843

The CVE describes a vulnerability in Docker Model Runner (macOS) where the MLX-LM backend unconditionally imports and executes arbitrary Python files specified by model_file in a model's config.json via importlib, without a trust_remote_code gate or sandboxing. This enables container-to-host arbi...