Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bluez (UTSA-2026-054081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054081 advisory. BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2022-001272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001272 advisory. FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef ak...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: byacc (UTSA-2023-000152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000152 advisory. RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002131 advisory. addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...

Linux Distros Unpatched Vulnerability : CVE-2026-93710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compilehooks. A ho...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: amanda (UTSA-2023-002123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002123 advisory. AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pillow (UTSA-2026-090114)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090114 advisory. In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2026-054038)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054038 advisory. A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-000282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000282 advisory. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt5-qtbase (UTSA-2023-001575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001575 advisory. Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x...

Linux Distros Unpatched Vulnerability : CVE-2026-94640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - rpcbind - None CVE-2026-94640 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, In...

CHARON

root@kitploit: / || | | | / \ | \ / | \ | | | | | || | / \ | | | | | | | | | | | |/ | "落入永生神的手中是一件可怕的事。" — 希伯来书 10:31 这是什么 一个紧凑、无依赖的 CVE-2026-46333 概念验证：Qualys 于 2026-05-15 披露的 ptracemayaccess mm==NULL 绕过。Charon 将 pidfdgetfd2 与一个正在退出的 SUID-root 进程进行竞态， 以在其 doexit 中短暂的 mm-NULL 窗口期间提取其打开的...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-漏洞利用 此仓库提供了一套全面的漏洞利用代码和文档，专门为渗透测试人员和红队专业人士设计。它是旨在有效利用Linux Dirty Pipe漏洞的宝贵资源。 关于漏洞 Dirty Pipe（CVE-2022-0847）是Linux内核中发现的一个本地权限提升漏洞。此安全缺陷允许非特权用户执行多项关键操作，包括： 修改或覆盖任意只读文件（如 /etc/passwd），从而可用于操纵用户身份验证机制。 获得提升后的Shell，进而获取受影响系统上未经授权的管理员权限。...

2004

2004 Exploits del Kernel de Linux - CVE-2004-0077 + CVE-2004-1235 + capstoroot...

CVE-2026-68138

CVE-2026-68138 — Linux kernel net/sched qdisc rate-table UAF tracking site Source for the CVE-2026-68138 patch-status tracker: a single-page site recording which distributions have shipped a fix for the net/sched qdisc rate-table use-after-free / double-free in the Linux kernel. Where the facts...

kali-preseed-examples

Ejemplos de Preseed para Kali Los archivos de Debian preseed son herramientas útiles para automatizar la instalación y configuración de una distribución basada en Debian. Kali puede utilizarlos para acelerar las instalaciones con una instalación personalizada, consistente y sin intervención manua...

COMP3320-VAPT

COMP3320-VAPT 用于演示 Linux 内核 v5.8 中 CVE-2022-0847 漏洞所需的文件 编译 $ make...

CVE-2019-13272

CVE-2019-13272 PTRACETRACEME CVE-2019-13272 本地提权漏洞分析 PTRACETRACEME 是一个 Linux 内核中的权限提升漏洞，由 Jann Horn 于 2019 年 7 月发现。 漏洞分析： Ptrace 是一个系统调用（system call），它提供了一种方法，允许一个进程（tracer）观察和控制另一个进程（tracee）的执行过程，检查并修改其核心映像（core image）和寄存器，主要用于在调试中设置断点（break point）以及跟踪系统调用的调用过程。 c 1 396 kernel/ptrace.c...

spectre-meltdown-checker

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list...

CVE-2022-37706

CVE-2022-37706 大家好，这次我要讲的是我在 Linux 的一个主流窗口管理器 Enlightenment https://www.enlightenment.org/ 中发现的一个最新 0-day 漏洞。 这个 0-day 可以非常轻松、即时地将任何用户提升至 root 权限。 该利用程序已在 Ubuntu 22.04 上测试，但应该在任何发行版上都能正常工作。 首先，Enlightenment 是一个窗口管理器、合成器和极简桌面环境， 适用于 Linux（主要平台）、BSD 以及任何其他兼容的 UNIX 系统。 我安装了这个窗口管理器，想稍微试验一下。它对我来说很有趣，...