exploit_mitigations

Mitigazioni dello sfruttamento L'obiettivo è elencare le mitigazioni dello sfruttamento aggiunte nel tempo in vari sistemi operativi, software, librerie o hardware. È utile sapere se una data vulnerabilità è facilmente sfruttabile o meno in base alle mitigazioni dello sfruttamento in atto. Un...

CVE-2026-41285-OpenBSD-v6daemons-go-brrr

CVE-2026-41285: Un pacchetto uccide IPv6 su OpenBSD Un singolo pacchetto ICMPv6 appositamente costruito proveniente dalla rete locale blocca permanentemente slaacd e/o rad. L'autoconfigurazione degli indirizzi IPv6 SLAAC cessa finché qualcuno non riavvia manualmente il demone. Nessuna...

naxsi

Project Status This is a project status update regarding Naxsi. As you may have noticed, the development of Naxsi has been stopped and the repository will be archived for historical reasons. This means that no new updates or bug fixes will be released for this version. However, if you wish to...

TriforceOpenBSDFuzzer

TriforceOpenBSDSyscallFuzzer 20160825 https://github.com/nccgroup/TriforceOpenBSDFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] Questa è una raccolta di file utilizzata per eseguire il fuzzing delle system call su OpenBSD amd64 usando TriforceAFL cioè AFL e QEMU. Per...

Openbsd-Privilege-Escalation

Openbsd-Privilege-Escalation Ein Skript, das den Prozess der Rechteausweitung auf OpenBSD-Systemen automatisiert CVE-2019-19520, indem es das xlock-Binary ausnutzt und dessen sgid erlangt und dann zum Root-Benutzer eskaliert CVE-2019-19522 durch Ausnutzung der Privilegien der auth-Gruppe und...

CVE-2020-7247

CVE-2020-7247 Proof-of-Concept-Exploit für CVE-2020-7247 Remote-Ausführung auf OpenSMTPD 6.6.2 OpenSMTPD 6.6.2 https://www.cvedetails.com/cve/CVE-2020-7247 getestet auf: OpenBSD 6.6 Dank an Marco Ivaldi [email protected] für den Payload Verwendung remote $ go run CVE-2020-7247.go -u...

local-exploits

स्थानीय शोषण विभिन्न स्थानीय शोषण CVE-2020-8793 opensmptd-makemap-lpe - Fedora 31 OpenSMTPD makemap स्थानीय रूट शोषण। कोड अधिकतर Qualys advisory 2020-02-24 से लिया गया है CVE-2020-8793 के लिए। opensmtpd: गैर-विशेषाधिकार प्राप्त हमलावर द्वारा मनमानी फ़ाइल पढ़ने से सूचना प्रकटीकरण या विशेषाधिकार...

openbsd_ov1

OpenBSD TCP/IP-Überlauf Getestet mit dem neuesten OpenBSD 7.2 Details: root@kitploit: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uch...

team-teso

team-teso Il TESO-CVS è stato donato a THC alla festa del 10° anniversario di THC nel 2005 Berlino. È pubblicato qui solo per scopi educativi. DIVERTITI. Alcuni artefatti non sono mai stati ospitati sul CVS e sono persi nel tempo: Lo sfruttamento SSH di TESO Molti ohh, così tanti! exploit per...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

CVE-2020-7247

CVE-2020-7247 Questa vulnerabilità esiste nella funzione “smtpmailaddr” del server di posta OpenSMTPD di OpenBSD, e interessa la versione 6.6 di OpenBSD. Ciò permette a un attaccante di eseguire comandi shell arbitrari come “sleep 66” come utente root. Come usare? python3 getShell.py Se hai bisog...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

CVE-2026-49426 Incorrect audit records for ptrace(2) syscall requests

When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an internal setup function to AUDITSYSCALLEXIT rather than the actual result of the executed system call. As a result, committed audit records for system calls which returned an error do not reflect t...

Exploit for Race Condition in Openbsd Openssh

No d...

[SECURITY] Fedora 43 Update: openssh-10.0p1-11.fc43

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 44 Update: openssh-10.2p1-13.fc44

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 44 Update: openssh-10.2p1-12.fc44

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

The vulnerability of the sppp_pap_input() function in the if_spppsubr.c script of the OpenBSD operating system allows a hacker to circumvent security restrictions.

The vulnerability of the sppppapinput function in the ifspppsubr.c script of the OpenBSD operating system is related to deficiencies in the mechanism for restricting the amount of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

OPENSUSE-SU-2026:21179-1 Security update for lrzip

This update for lrzip fixes the following issues: Changes in lrzip: - Update to version 0.660: Do not clean up thread structures in decompression failure conditions, fixing a use-after-free in lzmadecompressbuf and a NULL pointer dereference in ucompthread on corrupt/malicious archives...

OpenBSD Resource Management Vulnerability (CNVD-2026-26371)

OpenBSD is a Unix-like operating system that focuses on security and code quality. There is a resource management vulnerability in OpenBSD. This vulnerability stems from the use of the syssem.get function in sys/kern/sysvsem.c, where a memory error occurs due to a context switch after tsleep. An...