175 matches found
CVE-2023-1326-PoC
CVE-2023-1326-PoC 针对 apport-cli 2.26.0 中 CVE-2023–1326 的概念验证 此漏洞是 apport-cli 2.26.0 中的权限提升漏洞,与 CVE-2023–26604 类似,但仅在将 apport-cli 分配至 sudoers 中时有效: 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击,与 CVE-2023-26604 类似。如果系统被特殊配置为允许非特权用户运行 sudo apport-cli,且 less 被设置为分页器,同时终端大小可被设置:则本地攻击者可以提升权限。 PoC root@kitploi...
intercept
支持此开源项目的开发者 信号情报平台 一个基于 Web 的软件定义无线电工具接口。 功能 寻呼机解码 - 通过 rtlfm + multimon-ng 解码 POCSAG/FLEX 433MHz 传感器 - 通过 rtl433 解码气象站、TPMS、物联网设备 Sub-GHz 分析仪 - 通过 HackRF 进行 300-928 MHz ISM 频段的射频捕获和协议解码 飞机跟踪 - 通过 dump1090 进行 ADS-B 跟踪,含实时地图和雷达 船舶跟踪 - AIS 船舶跟踪,含 VHF DSC 遇险监控 ACARS 消息 - 通过 acarsdec 解码飞机数据链消息...
CVE-2023-1326
CVE-2023-1326 CVE-2023–1326 在 apport-cli 2.26.0 中的概念验证 此漏洞是 apport-cli 2.26.0 中的权限提升漏洞,类似于 CVE-2023–26604,该漏洞仅在 sudoers 中分配时才有效: 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击,类似于 CVE-2023-26604。如果系统被特殊配置允许非特权用户运行 sudo apport-cli,且 less 被配置为分页器,并且可以设置终端大小,则本地攻击者可以提升权限。 root@kitploit: sudo...
CVE-2023-1326-PoC
CVE-2023-1326-PoC CVE-2023-1326 在 apport-cli 2.26.0 中的概念验证 该漏洞是 apport-cli 2.26.0 中的权限提升漏洞,类似于 CVE-2023-26604,仅在 sudoers 中分配了 apport-cli 时才有效: 在 apport-cli 2.26.0 及更早版本中发现了一个与 CVE-2023-26604 类似的权限提升攻击。如果系统被特殊配置为允许非特权用户运行 sudo apport-cli,并且 less 被配置为分页器,且终端大小可设置:则本地攻击者可以提升权限。 概念验证 root@kitploit:...
CVE-2023-1326
CVE-2023-1326 CVE-2023–1326 在 apport-cli 2.26.0 中的概念验证 此漏洞为 apport-cli 2.26.0 中的权限提升漏洞,类似于 CVE-2023–26604,此漏洞仅在 sudoers 中分配时才有效: 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击,类似于 CVE-2023-26604。如果系统被特别配置为允许非特权用户运行 sudo apport-cli,less 被配置为分页器,并且可以设置终端大小:本地攻击者可以提升权限。 PoC root@kitploit: sudo...
lrs-pager-systems-bruteforce
lrs-pager-systems-bruteforce Herramienta de información y fuerza bruta para sistemas de buscapersonas de largo alcance Long Range Pager Systems, buscapersonas y localizadores, URH y YS1 yardstick one / cc11xx lrs-pager-systems-bruteforce Herramienta de información y fuerza bruta para sistemas de...
CVE-2025-36940
Use-After-Free vulnerability in a zircon kernel pager proxy Fuchsia, which could lead to a Privilege Escalation from Userspace to Kernel AP...
CVE-2025-36940
Use-After-Free vulnerability in a zircon kernel pager proxy Fuchsia, which could lead to a Privilege Escalation from Userspace to Kernel AP...
EUVD-2025-210765
Use-After-Free vulnerability in a zircon kernel pager proxy Fuchsia, which could lead to a Privilege Escalation from Userspace to Kernel AP...
CVE-2025-36940
CVE-2025-36940 is a Use-After-Free vulnerability in the zircon kernel pager proxy of the Fuchsia operating system. An attacker can exploit this flaw to achieve Privilege Escalation from Userspace to Kernel (AP) . The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a network attack vector, low comp...
PT-2026-80925
Use-After-Free vulnerability in a zircon kernel pager proxy Fuchsia, which could lead to a Privilege Escalation from Userspace to Kernel AP...
CVE-2026-49418 Use-after-free in device pager page list
When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A subsequent page fault will cause the fault handler to re-insert the page into the object's list. This corrupts the list, a...
CVE-2026-49418
On FreeBSD, calling msync(MS_INVALIDATE) on a mapping of an unmanaged device object leaves invalidated pages in the pager's page list; a subsequent page fault re-inserts them, corrupting the list and causing a double-free on object destruction. An unprivileged local user with memory-mapped I/O ac...
[SECURITY] Fedora 43 Update: rust-git-delta-0.19.1-7.fc43
A syntax-highlighting pager for git...
[SECURITY] Fedora 44 Update: rust-git-delta-0.19.1-7.fc44
A syntax-highlighting pager for git...
FreeBSD : FreeBSD -- Use-after-free in device pager page list (5a34b147-74e0-11f1-958d-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5a34b147-74e0-11f1-958d-bc241121aa0a advisory. When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the...
FreeBSD-SA-26:37.vm
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:37.vm Security Advisory The FreeBSD Project Topic: Use-after-free in device pager page list Category: core Module: vm Announced: 2026-06-30 Credits: slidybat...
FreeBSD -- Use-after-free in device pager page list
Problem Description: When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A subsequent page fault will cause the fault handler to re-insert the page into the object's list. This...
CVE-2026-56315
CVE-2026-56315 affects the Python tool picklescan until version 1.0.4, which fails to block imports from at least seven standard library modules (e.g., uuid, _osx_support, _aix_support, _pyrepl.pager, imaplib). This allows adversaries to craft pickle files that import these unblocked modules to t...
CVE-2026-56315
picklescan before 1.0.4 fails to block at least seven Python standard library modules including uuid, osxsupport, aixsupport, pyrepl.pager, and imaplib exposing eight functions that provide direct arbitrary command execution. Attackers can craft malicious pickle files importing these unblocked...