wildpwn

First things first! Read: https://www.exploit-db.com/papers/33930/ Basic usage It goes something like this: usage: wildpwn.py -h --file FILE payload folder Tool to generate unix wildcard attacks positional arguments: payload Payload to use: combined | tar | rsync folder Where to write the payload...

cve-2024-12085

CVE-2024-12085 Infoleak exploit Note, this exploit is not versatile! Target module and checksums are hardcoded. Automatic checksum calculation has yet to be implemented. Miscellaneous files port-forwarding.py is modified from https://gist.github.com/WangYihang/e7d36b744557e4673d2157499f6c6b5e. It...

SyncShield

🔐 SyncShield — Browser Extension for CVE-2018-5764 Detection Detect unsafe Rsync commands before they become exploits A lightweight, privacy-focused browser extension developed as part of Final Year Project NWS/129/23B to detect missing --protect-args flag in Rsync commands — preventing remote...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest security patch release of NPS Vulnerability Details CVEID:CVE-2023-36464 DESCRIPTION: pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads t...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-4046 DESCRIPTION: The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130072)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130072 advisory. rsync before 3.5.0contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intended...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130120 advisory. rsync before 3.5.0contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130113 advisory. rsync before3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated client...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130076)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130076 advisory. rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130136 advisory. rsync before 3.5.0contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130119 advisory. rsync 3.2.5 before 3.5.0contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte past the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130141 advisory. rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries wit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130131 advisory. rsyncbefore 3.5.0contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130127)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130127 advisory. rsync before 3.5.0contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130118 advisory. rsync 3.1.0 before 3.5.0contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130114)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130114 advisory. rsync 3.0.1 before 3.5.0contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by...

rsync: Fix of 6 CVEs

CVE-2026-53784: confine the daemon's absolute chdir target with a new ownership-walk resolver so a planted parent symlink cannot steer a "use chroot = no" module root outside the module - CVE-2026-53786: strip a real moduledir prefix before the daemon-filter check on a merge-file path -- leaving...

MGASA-2026-0487 Updated rsync package fixes security vulnerabilities

Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, which could result in local privilege escalation, bypass of intended access restrictions, information disclosure, denial of service or the execution of arbitrary code...

Updated rsync package fixes security vulnerabilities

Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, which could result in local privilege escalation, bypass of intended access restrictions, information disclosure, denial of service or the execution of arbitrary code...

EulerOS 2.0 SP11 : rsync (EulerOS-SA-2026-4376)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victi...