617 matches found
dirtyCow
Dirtycow 也被称为 CVE-2016-5195，是过去非常流行的一个漏洞。 首先，选择适合该漏洞的 Linux 版本。 然后在 VBOX 或 VMWare 上安装或运行它。 安装后，按照以下说明操作： 1. 创建一个没有 root 访问权限的用户。 2. 登录到该用户。 3. 创建目录。 4. 为 '.txt' 文档创建 root 访问权限，并仅赋予只读权限。 5. 在创建 '.txt' 文件的目录中编译并运行 '.c' 文件。 6. 然后运行它，运行前需要提供两个参数。 ./compilenameoffilecreated r-only file writeheresometh...
rapid7-CVE-2026-15409
CVE-2026-15409 本仓库包含CVE-2026-15409的概念验证漏洞利用。它通过实现localhost:1050预期的Erlang协议，并通过WebSocket进行隧道传输，利用RPC调用来实现非root远程代码执行，支持文件读写及任意代码执行。 使用方法 root@kitploit: python3 cve-2026-15409.py --ws-url 'wss://192.168.1.46/wsproxy?bmID=-3389c1b25ccd&serviceType=SSH&host=0.0.0.0&port=1050' --ws-user-agent 'SMA...
sadcloud
Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...
lamda
FIRERPA Android ｜ AI-Powered Automation 一个集下一代技术于一体的全能型 Android 自动化框架，融合了强大的端侧服务、AI 就绪型智能体以及可扩展的工具调用能力。 Documentation | 使用文档 | TELEGRAM | QQ 群 | SKILLS | llms-full.txt | 中文版本 FIRERPA 是面向 Android 的一体化设备控制平台 。服务端直接在设备上运行，无需额外运行时依赖 ；适配多代 Android 系统 ，无论是否 Root 均可使用 。PC 端通过 Python 客户端库统一调度，将 UI...
EUVD-2026-51988
ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via t...
CVE-2026-68578 ArcadeDB before 26.7.3 Authentication Bypass via MCP Transport
ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via t...
CVE-2026-68578
ArcadeDB before 26.7.3 is affected by an authentication bypass in the MCP HTTP transport: the server does not bind the authenticated principal, causing engine permission checks to pass as no-ops. As a result, non-root MCP-allowed users can perform arbitrary writes, DDL, schema mutations, and run ...
CVE-2026-68563
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...
CVE-2026-68563
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...
Linux Distros Unpatched Vulnerability : CVE-2026-68563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is...
GHSA-P279-2CQP-84JG OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check
Summary When a SASL PLAIN bind supplies an authorization identity authzid that resolves to a different user, PlainSASLMechanismHandler verified only the PROXIEDAUTH privilege and never evaluated the "proxy" access-control right the mayProxy ACI scope check. As a result, any account holding the...
SUSE CVE-2026-63892
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
SUSE-SU-2026:3124-1 Security update for microcode_ctl
This update for microcodectl fixes the following issue: - CVE-2025-35979: shared microarchitectural predictor state in VMX non-root operation could lead to data leaks bsc1265189. Changes for microcodectl: - Intel CPU Microcode was updated to the 20260512 release bsc1265189: Update for various...
Linux Distros Unpatched Vulnerability : CVE-2026-63892
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords fro...
CVE-2026-63892
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
CVE-2026-63892 thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
EUVD-2026-45665
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
CVE-2026-63892
CVE-2026-63892 affects the Linux kernel thunderbolt property parsing. The non-root path in __tb_property_parse_dir() may read beyond the end of a property block when entry->length length and the code copies 4 dwords from dir_offset regardless of dir_len. This creates two OOB conditions: (1) a ...
CVE-2026-63892 thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
PT-2026-61209
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt property handling where the tb property parse dir function fails to properly validate the dir len value derived from entry-length. When dir len is less...