511 matches found
f32
La f32 es una placa de desarrollo ESP32 ultracompacta diseñada para montarse directamente detrás de un conector USB-C. La PCB mide solo 9.85 mm x 8.45 mm. Está alimentada por el microcontrolador ESP32-C3FH4 y fue creada principalmente para investigación y como una especie de prueba de estrés para...
Disk-Arbitrator
Introducción Disk Arbitrator es una utilidad forense para Mac OS X diseñada para ayudar al usuario a garantizar que se sigan los procedimientos forenses correctos durante la creación de imágenes de un dispositivo de disco. Disk Arbitrator es esencialmente una interfaz de usuario para el framework...
CVE-2015-1769
CVE-2015-1769 CVE-2015-1769 的 PoC 用于复现 CVE-2015-1769 的 VHD 文件。该 VHD 不包含实际载荷，仅包含 notepad.exe。 挂载后，如果已安装最新补丁，请检查系统日志中报告的受阻错误。 批处理脚本展示了如何创建触发该漏洞的符号链接，同样的机制也可用于修改硬盘（HDD）或 USB 驱动器。...
lxd_root
通过 LXD 实现 Linux 特权提升 概述 Linux 系统上本地 lxd 组的成员有多种途径将其权限提升至 root。本仓库包含全自动本地 root 利用示例。漏洞的详细解释及利用演练可在我的博客 此处 找到。 以下利用并非容器逃逸，而是 利用 容器并 针对 宿主操作系统的本地 root 利用。成功利用需要宿主环境的低权限访问。 我相信我在第二个版本中的策略是独特的，并且足够有趣（至少对我来说）以至于在以上链接的博客中写了详细解释。 lxdrootv1.sh 将宿主机的 / 文件系统挂载到容器中，在容器内宿主机的低权限用户具有 root 访问权限。此 root...
sharesniffer
sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...
CVE-2025-9074-PoC
Docker API 未授权 RCE CVE-2025-9074 一个严重的 CVE-2025-9074 漏洞存在于 Docker Desktop 中，使得本地运行的 Linux 容器能够通过默认子网 192.168.65.7:2375 连接到 Docker Engine API。无论是否启用增强容器隔离 ECI 或 TCP 暴露设置，该问题仍然存在。针对 CVE-2025-9074 的概念验证 PoC 利用代码已公开。该漏洞可能导致主机系统上的用户文件被未经授权访问。因此，风险等级被评定为高风险。 一个独立的 Bash 脚本，用于利用未经认证的暴露 Docker API（通常为端口...
lehack-2026-challenge
Reto LeHack 2026 Un reto de 3 niveles que demuestra el impacto del montaje directo de disco. Resumen del reto Nivel| Objetivo| Técnica ---|---|--- 1| Acceder al disco sin cifrar| Establecer la línea de comandos de arranque a init=/bin/bash en grub 2| Romper el LUKS de vault1| Extraer la cabecera ...
CVE-2025-9074-Poc
Docker API 未授权远程代码执行 CVE-2025-9074 Docker Desktop 中的一个严重 CVE-2025-9074 漏洞，使得本地运行的 Linux 容器能够通过默认子网 192.168.65.7:2375 连接 Docker Engine API。无论是否启用增强容器隔离 ECI 或 TCP 暴露设置，该问题都会持续存在。CVE-2025-9074 的概念验证利用代码已公开。该漏洞可能允许未经授权访问主机系统上的用户文件。因此，风险等级被评定为高风险。 一个独立的 Bash 脚本，用于利用暴露的 Docker API（通常为 2375...
CVE-2026-84269
A flaw was found in the AFP backend in gvfs. When mounting a share, a...
UBUNTU-CVE-2026-84268
A flaw was found in the SFTP backend in gvfs. When mounting a share an...
UBUNTU-CVE-2026-84267
A flaw was found in the SFTP backend in gvfs. When mounting a share, a...
Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10
In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed a warning in mbfindextent. Syzbot identified the following issues: EXT4-fs: Warning: Mounting with data=journal disables delayed allocation, dioreadnolock, ODIRECT, and fastcommit support! EXT4-fs loop0: orphan...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: USB: gadgetfs: Fix race between mounting and unmounting The syzbot fuzzer and Gerald Lee have identified a use-after-free bug in the gadgetfs driver. This bug involves processes concurrently mounting and unmounting the gadgetf...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: fs/ntfs3: Validates the BOOT recordsize field. When the NTFS BOOT recordsize field is less than 0, it represents a shift value. However, there is no sanity check on the shift result, and the sbi-recordbits calculation using...
Astra Linux – Vulnerability in open-vm-tools
A issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass the intended access restrictions on mounting shares through a symlink attack that exploits a realpath race condition in mount.vmhgfs also known as hgfsmounter...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: fs/ntfs3: Added a null pointer check for inode operations This adds a sanity check for the iop pointer of the inode, which is returned after reading the Root directory MFT record. We should check that the iop is valid before...
CVE-2026-71470
In ACM search-v2-operator, CR editor fields (imageOverride, arguments, env vars) are unsanitized into pods running under an impersonation ServiceAccount, enabling arbitrary secret mounting or container image replacement for privilege escalation and full cluster compromise. Red Hat advises restric...
PT-2026-78536
Name of the Vulnerable Software and Affected Versions search-v2-operator affected versions not specified Description A flaw in the search-v2-operator allows a privileged user with Custom Resource CR editor permissions to manipulate Search CR fields without proper validation. The affected fields...
CVE-2026-72470 fs/ntfs3: resize log->one_page_buf when adopting on-disk page size
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log-onepagebuf when adopting on-disk page size logreplay allocates log-onepagebuf using the page size that was chosen from the host PAGESIZE: log-onepagebuf = kmalloclog-pagesize, GFPNOFS; Later, when a restart...
