CVE-2022-0847

CVE-2022-0847 эксплойт CVE-2022-0847, который напрямую удаляет пароль учётной записи root Использование: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit Требования: gcc Суть работы: Классический эксплойт POC Макса Келлермана использовался для добавления пользователя с правами root, но в этом POC...

CVE-2023-22809

CVE-2023-22809 Analyse & Exploit Informations de base Numéro de vulnérabilité : CVE-2023-22809 Niveau de vulnérabilité : Élevé Score de vulnérabilité : 7.8 Versions concernées : sudo 1.8.0 - sudo 1.9.12p1 sudo = 1.8.0 ou sudo = 1.9.12p1 Effet de l'attaque : Élévation de privilèges locale Méthode...

Dirty-Pipe-Oneshot

Dirty-Pipe-Oneshot CVE-2022-0847（又名 Dirty Pipe）的编译版本。只需一击即可获得 root 权限 :D 只需编译 cve-2022-0847.c 文件 root@kitploit: gcc cve-2022-0847.c -o getroot 然后在目标机器上执行并获取 root 权限 :D root@kitploit: ./getroot /etc/passwd 1 ootz: 祝你 Root 愉快 🎭...

dirty-pipe

Dirty Pipe - CVE-2022-0847 Ceci est simplement le code et les instructions pour utiliser l'exploit de Max Kellermann pour CVE-2022-0847 connu sous le nom de Dirty Pipe. Veuillez vous rendre sur https://dirtypipe.cm4all.com/ pour en savoir plus sur le fonctionnement de l'exploit ! Comment utiliser...

RootRemover

!WARNING 소유하고 있거나 테스트 권한이 있는 시스템에서만 사용하십시오. RootRemover CVE-2026-31431 루트 비밀번호를 일시적으로 제거하며, CVE-2026-31431을 사용하여 현재 사용자의 비밀번호를 모르더라도 아키텍처에 관계없이 루트로 권한 상승할 수 있도록 합니다. 책임감 있게 사용하십시오. 테스트 권한이 있는 시스템에서만 사용하십시오. 이 방법이 시스템에서 지원되는지 여부는 다를 수 있지만, 제가 테스트한 모든 Debian 기반 배포판에서 작동했습니다. 이 PoC는 기본적으로...

CVE-2026-12503

Improper Link Resolution CWE-59 in /usr/bin/larmstarter in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an authenticated larmapp attacker to make /etc/passwd writable by the larmapp group leading to root privilege escalation via a symlink attack on...

CVE-2026-15809

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

PT-2026-31313

Name of the Vulnerable Software and Affected Versions Red Hat Process Automation Manager affected versions not specified Description A container privilege escalation flaw exists due to group-writable permissions on the /etc/passwd file during image build time. An attacker executing commands withi...

CVE-2025-8766 Noobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container

A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container,...

EUVD-2020-12559

Malware in sbrugna...

EUVD-2020-12563

Malware in sbrugna...

SUSE CVE-2020-1705

A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/template-service-broker-operator. An attacker with access to the container could use this...

CVE-2019-19354

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

Design/Logic Flaw

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating...

CVE-2019-19346

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their...

Unspecified Vulnerability in Red Hat OpenShift Container Platform openshift/mediawiki

Red Hat OpenShift Container Platform is a suite of application platforms from Red Hat that enable organizations to develop, deploy and manage existing container-based applications across physical, virtual and public cloud infrastructures. A security vulnerability exists in version 4.x.x of...

CVE-2020-1707

A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/postgresql-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and...

PT-2020-10147 · Red Hat · Openshift/Ocp-Release-Operator-Sdk +2

Name of the Vulnerable Software and Affected Versions: openshift/ocp-release-operator-sdk affected versions not specified openshift/ansible-operator-container as shipped in Openshift 4 affected versions not specified Description: An insecure modification vulnerability in the /etc/passwd file was...

CVE-2019-19351

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

Exploit for Race Condition in Canonical Ubuntu_Linux

This is a PoC exploit for CVE-2016-5195, a vulnerability in the Linux kernel that allows for a local privilege escalation. The exploit is implemented in C++ and has been ported to Go and a legacy version without C++11 features. The exploit modifies the /etc/passwd file, forcing the password...