NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Metasploitモジュール InfoBlox Network Automation OSコマンドインジェクション Metasploitモジュール 製品: NetMRI Switch Port Manager Automation Change Manager Security Device Controller ベンダー: InfoBlox 影響を受けるバージョン: 6.4.X.X-6.8.4.X テスト済みバージョン: 6.8.2.11 CVE 参照: CVE-2014-3418 発見者および提供者: Nate Kettlewell,...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation CVE-2021-4034をベースに強化されており、Exploitを実行するとデフォルトでユーザー名rooter、パスワードHello@Worldが追加され、rooterユーザーはsudo権限を持つことになります。 Refer to CVE-2021-4034, executing Exploit will add username rooter, password Hello@World by default, and The...

dirtyCow

Dirtycow는 CVE-2016-5195로도 알려져 있으며 과거에 매우 인기 있었던 취약점입니다. 먼저 해당 취약점에 맞는 Linux 버전을 선택하십시오. 그런 다음 VBOX 또는 VMWare에 설치하거나 실행하십시오. 설치한 후 다음 지침을 따르십시오. 1. 루트 액세스 권한이 없는 사용자를 생성합니다. 2. 생성한 사용자로 로그인합니다. 3. 디렉터리를 생성합니다. 4. ‘.txt’ 문서에 대한 루트 액세스를 생성하고 읽기 전용 권한을 부여합니다. 5. ‘.txt’ 파일이 생성된 위치에서 ‘.c’ 파일을 컴파일하고...

CVE-2026-0770

CVE-2026-0770: Langflow execglobals 인증되지 않은 원격 코드 실행 PoC CVE-2026-0770 는 Langflow에 영향을 미치는 인증되지 않은 원격 코드 실행RCE 취약점입니다. 이 결함은 /validate 엔드포인트에 제공된 execglobals 매개변수 처리 중 부적절한 입력 검증으로 인해 발생합니다. 이를 악용하여 공격자는 검증 루틴 중 신뢰할 수 없는 전역 환경을 전달할 수 있으며, root 사용자 컨텍스트에서 원격 코드 실행을 달성합니다. ! 면책 조항 경고: 이 도구는 승인된 보안...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

CVE-2026-20321

A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...

Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability

A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...

CVE-2024-22274

CVE-2024-22274: VMware vCenter Server에서의 인증된 원격 코드 실행 vCenter Server에는 인증된 원격 코드 실행 취약점이 포함되어 있습니다. vCenter 어플라이언스 셸에 관리자 권한이 있는 악의적인 행위자가 이 문제를 악용하여 기본 운영 체제에서 'root' 사용자로 임의의 명령을 실행할 수 있습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개는 여기에서 확인할 수 있습니다. 요구 사항: 이 취약점을 악용하려면 다음이 필요합니다: 'admin' 역할을 가진 사용자의 유효한 자격 ...

polkadots

polkadots CVE-2021-3560 로컬 권한 상승 익스플로잇 이 익스플로잇은 루트로 권한 상승할 수 있는 새로운 특권 사용자를 생성합니다. 영향을 받는 배포판: RHEL 8 Fedora 21 Debian testing Bullseye Ubuntu 20.04 사용법 ./polkadots -a 계정 -n 계정 이름 -h 비밀번호 해시 -i 반복 횟수 해시된 비밀번호 생성: openssl passwd -6 password@123 기본값: -a boris -n Boris Ivanovich Grishenko -h...

OESA-2026-4061 python-templated-dictionary security update

Dictionary where getitem is run through Jinja2 template. Security Fixes: The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of prope...

VMware VRealize Network Insight - Remote Code Execution

VMWare Aria Operations for Networks vRealize Network Insight is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote unauthenticated attacker to execute arbitrary commands on the underlying operating system as the ro...

The vulnerability of the /etc-ro/shadow file in the Tenda G1 router microprogramming system allows a hacker to execute arbitrary commands on behalf of the root user.

The vulnerability of the /etcro/shadow file in the Tenda G1 router microprogramming system is related to the use of fixed password encoding. Exploiting this vulnerability allows an attacker to execute arbitrary commands on behalf of the root user...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: pxafb: Fixed possible use after free in pxafbtask. In the pxafbprobe function, it calls the pxafbinitfbinfo function. After that, &fbi-task is associated with pxafbtask. Moreover, within this pxafbinitfbinfo function, the...

Astra Linux – Vulnerability in OpenSSH

In OpenSSH versions prior to 10.3, a file downloaded using scp might be installed with setuid or setgid permissions, which contradicts some users’ expectations. This occurs when the download is performed as the root user with the -O legacy scp protocol option, and without the -p preserve mode...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code under the root user’s identity.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on behalf of the root user remotely...

CVE-2026-67397

Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root...

K000163042: OpenSSH vulnerability CVE-2026-35385

Security Advisory Description In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O legacy scp protocol and without -p preserve mode. CVE-2026-35385 Impact There is no impac...

GO-2026-6240 New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api

New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api...