CVE-2017-1000117

CVE-2017-1000117 Project Introduction One of the selected topics for the cybersecurity course project Reproduction of CVE-2017-1000117 vulnerability PoC + Exploit Git + SSH Vulnerability Introduction: Vulnerability Name: Git command injection vulnerability CNNVD ID: CNNVD-201708-670 Hazard Level:...

3007Project

3007Project setuid program used to update player's score. Read score file content, search and update score base on given player ID, if no player ID is found, then new ID and score is added to file. Program should not crash unexpectedly and should exit gracefully with errors handled. Check for...

CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white-hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, assigned CVE-2017-16995. This...

CVE-2021-31630

CVE-2021-31630 Modified the PoC CVE-2021-31630 script by Fellipe Oliveira for HTB Usage 'Example usage: exploit.py -u http://target-uri:8080 -l admin -p admin -i 192.168.1.54 -r 4444 -P program.st"'...

oss-bounty-program

Programa de Recompensas OSS de ProjectDiscovery Propósito El Programa de Recompensas OSS de ProjectDiscovery existe para democratizar la seguridad, recompensando contribuciones significativas de la comunidad global. Nuestras herramientas son utilizadas por investigadores, defensores y...

CVE-2019-9193byVulHub

CVE-2019-9193byVulHub PostgreSQL Arbitrary Command Execution with Admin Privileges CVE-2019-9193 Description PostgreSQL is a powerful open-source relational database management system. A vulnerability present in versions 9.3 through 11 allows administrators or users with COPY TO/FROM PROGRAM...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC 高危 – CVSS 9.9 – 在 PMM 3.7 中经过身份验证的远程代码执行。 描述 本概念验证利用了一个漏洞：PMM 中的内部 PostgreSQL 用户保留了 "SUPERUSER" 权限。拥有 "pmm-admin" 权限的经过身份验证的攻击者可以滥用 "添加数据源" 功能，通过 PostgreSQL 的 'COPY ... TO PROGRAM' 执行任意操作系统命令。 受影响版本： PMM 3.7 修复版本： PMM 3.7（及更高版本） 要求 Python 3.6+ requests（pip...

SUSE SLES15: libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2026:3812-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3812-1 advisory. - CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU race condition...

KapeFiles

KAPE Files Targets y Modules creados por la comunidad para usar con KAPE Descargar KAPE · Informar de un error · Solicitar una función KapeFiles Descripción general de KAPE KAPE es un programa de triaje eficiente y altamente configurable que apunta esencialmente a cualquier dispositivo o ubicació...

pwnkit

CVE-2021-4034 Einführung Dies ist ein Exploit für die CVE-2021-4034-Schwachstelle, auch bekannt als pwnkit, die von Qualys entdeckt wurde. Verwendung Kompilierung root@kitploit: $ make oder root@kitploit: $ gcc -o pwnkit.so -fPIC -shared pwnkit.c -Wl,-e,main Testen root@kitploit: $ make test oder...

CVE-2026-82474

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. A local user with permission to run specific commands can execute denied programs by calling execveat directly or via fexecve , thereby bypassing both policy enforcement and au...

CVE-2025-41244

💻 Processo Tecnico Passo-Passo Compila il Programma bash Compile the C code into an executable gcc -o /tmp/httpd /tmp/CVE-2025-41244.c Make it executable chmod +x /tmp/httpd Testa la Funzionalità della Versione bash Test the -v flag should print version and exit /tmp/httpd -v Test the -V flag...

SSH-Remote-Code-Execution

Esecuzione Remota di Codice SSH SSH Zero-Day | Creato da ClumsyLulz & Taylor Christian Newsome Sommario Questo repository contiene un programma in C che accetta parametri di input e genera un pacchetto da inviare a un server tramite il protocollo SSH. Il programma alloca un buffer per contenere i...

CVEs

CVEs Queste sono le vulnerabilità che ho identificato e divulgato tramite il programma CVE...

buzzer

Buzzer - Una toolchain di fuzzing eBPF Buzzer è una toolchain di fuzzing che consente di scrivere strategie di fuzzing eBPF. Una strategia di fuzzing è un modo per generare programmi eBPF casuali e poi verificare che non abbiano comportamenti imprevisti. Per eseguire il fuzzer, segui i seguenti...

bug-bounty-standards

Cos'è Questo Repository? Questo repository è un elenco di situazioni che si verificano nei programmi di bug bounty e di come dovrebbero essere gestite. Molte di queste sono attualmente gestite caso per caso, il che porta a molta incertezza e frustrazione per hacker, proprietari dei programmi e...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall – Remote-Befehlseinschleusung Ein auf Python basierender Exploit für CVE-2022-30525 Zusammenfassung der Schwachstelle NIST Eine OS-Befehlseinschleusungsschwachstelle im CGI-Programm von Zyxel USG FLEX 100W Firmware-Versionen 5.00 bis einschließlich 5.21 Patch 1, USG...

awesome-mba

Questa repo contiene collegamenti pertinenti all'offuscamento Mixed Boolean-Arithmetic MBA. Le pull request sono benvenute. Si noti che alcune risorse qui non sono strettamente correlate all'MBA, sebbene tutte siano rilevanti in qualche modo. Articoli Information Hiding in Software with Mixed...

SNP-Assignment

SNP-Assignment Exploit-Arbeit Privilegieneskalation CVE-2017-1000112 Da die Privilegieneskalation der Meilenstein aus Sicht eines Angreifers ist, versuchte ich, ein wenig Recherche über lokale Privilegieneskalation zu betreiben, was der grundlegende Schritt der gesamten...

CVE-2026-80710 s390/dasd: Fix undersized format-check buffer

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...