cve-2024-12085

CVE-2024-12085 Infoleak 漏洞利用程序 注意，此漏洞利用程序并非通用！目标模块和校验和为硬编码。自动校验和计算尚未实现。 其他文件 port-forwarding.py 修改自 https://gist.github.com/WangYihang/e7d36b744557e4673d2157499f6c6b5e。它用于捕获 rsync 服务器与客户端之间的流量。 checksum.py 是我实现自动校验和计算的尝试。我没有足够的时间来完成它。 test.sh 是一个用于测试 rsync 中堆分配的脚本。...

SyncShield

🔐 SyncShield — 用于检测 CVE-2018-5764 的浏览器扩展 在 Rsync 命令成为漏洞之前检测不安全命令 一款轻量级、注重隐私的浏览器扩展，作为最终学年项目 NWS/129/23B 的一部分开发，用于检测 Rsync 命令中缺失的 --protect-args 标志 — 预防通过 CVE-2018-5764 进行的远程命令执行。 ✅ 完全离线运行 ✅ 无服务器连接或数据收集 ✅ 实时扫描与警报 ✅ 注重教育与缓解措施 ✅ 面向学生、系统管理员和安全爱好者 👥 团队成员 序号| 姓名| 学号| 角色与职责 ---|---|---|--- 1| Muhammad Nu...

CVE-2024-12084

CVE-2024-12084 rsync 데몬에서 힙 기반 버퍼 오버플로우 취약점이 발견되었습니다. 이 문제는 코드에서 공격자가 제어하는 체크섬 길이s2length를 부적절하게 처리하기 때문에 발생합니다. MAXDIGESTLEN이 고정된 SUMLENGTH16바이트를 초과하면 공격자는 sum2 버퍼에서 경계를 벗어난 쓰기를 수행할 수 있습니다. 이 탐지 방법은 어떻게 작동하나요? 이 템플릿은 CVE-2024-12084에 취약할 가능성이 높은 rsync 프로토콜 버전 31과 일치합니다. rsync의 프로토콜을 버전에 매핑하여 이를 확...

wildpwn

Prima di tutto! Leggi: https://www.exploit-db.com/papers/33930/ Utilizzo base Funziona più o meno così: root@kitploit: usage: wildpwn.py -h --file FILE payload folder Tool to generate unix wildcard attacks positional arguments: payload Payload to use: combined | tar | rsync folder Where to write...

git-remote-gcrypt

================= git-remote-gcrypt GNU Privacy Guard-verschlüsseltes git-Remote :Handbuchabschnitt: 1 Beschreibung git-remote-gcrypt ist ein git-Remote-Helfer, um aus und in mit GnuPG verschlüsselte Repositories zu pushen und zu pullen, unter Verwendung eines benutzerdefinierten Formats. Dieser...

CVE-2026-70460

A path traversal and symlink vulnerability in rsync allows a malicious sender with write access to write files outside the intended directory. By exploiting symbolic links in conjunction with the --partial-dir or --backup-dir options, an attacker can bypass path restrictions to modify arbitrary...

CVE-2026-70463

An authorization bypass flaw was found in the rsync daemon. The auth users directive parser incorrectly handles group names containing spaces due to comma-only tokenization. This flaw causes deny rules to be silently discarded, allowing an authenticated user to bypass restrictions and gain...

CVE-2026-70454

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

CVE-2026-70458

A flaw was found in rsync. This out-of-bounds write vulnerability allows attackers to corrupt memory by triggering specific processing on specially crafted file entries when hard-link preservation is not active. This can lead to denial of service or other unpredictable system behavior. Mitigation...

CVE-2026-70464

A denial of service flaw was found in the rsync daemon. An unauthenticated remote attacker can stall the handshake process by opening multiple concurrent connections and trickling data or stalling prior to module selection. This bypasses standard timeouts and exhausts all available connection...

CVE-2026-53784

A flaw was found in rsync. This path traversal vulnerability allows remote clients to access files outside the intended module root. This occurs when the use chroot option is disabled and the module root path, or a component of it, is a symbolic link. The rsync daemon fails to resolve symlinks...

CVE-2026-53793

A flaw was found in rsync. This vulnerability allows remote clients to bypass path confinement, a security measure designed to restrict file access. By crafting specific paths that include a '/./' boundary marker within a chroot environment, an attacker can gain unauthorized read or write access ...

CVE-2026-70462

A flaw was found in rsync. A remote attacker can exploit a signed integer overflow vulnerability in the I/O timeout implementation by sending specially crafted messages. These messages can disable connection timeouts, causing idle or stalled connections to persist indefinitely. This leads to...

CVE-2026-53795

A flaw was found in rsync. A remote attacker can exploit this vulnerability by specifying an absolute path using the --temp-dir or --link-dest options. This bypasses the rename-confinement logic, allowing the attacker to write files to arbitrary locations outside the intended destination tree,...

CVE-2026-53794

A flaw was found in rsync. A logic error in the --max-alloc handling allows a remote attacker to disable memory allocation sanity checks by setting --max-alloc=0. This can lead to the receiver attempting unbounded memory allocations, potentially exhausting available memory and causing a denial of...

CVE-2026-70452

A flaw was found in rsync. This vulnerability allows a remote attacker to bypass hostname-based access control rules. By inducing DNS resolution failures, the rsync daemon incorrectly skips deny rules, granting unauthorized access to restricted module file trees. Mitigation To mitigate this issue...

CVE-2026-53790

A command injection vulnerability in rsync allows remote attackers to execute arbitrary commands by supplying shell metacharacters or newlines in unsanitized inputs, such as hostnames or hostspecs. This impacts multiple vectors—including the RSYNCCONNECTPROG variable, daemon hooks, rsync-ssl, and...

CVE-2026-53791

A flaw in rsync allows an unauthenticated remote attacker to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address, granting unauthorized access to restricted resources. Mitigation Restrict rsync daemon TCP/873 to the trusted proxy only CME-202...

CVE-2026-70461

A flaw was found in rsync. Remote unauthenticated attackers can exploit a heap out-of-bounds write vulnerability by supplying a crafted files-from entry. This entry, containing both an interior and trailing backslash, causes the addimpliedinclude function to under-count the trailing backslash whe...

CVE-2026-70455

A denial-of-service flaw in rsync allows remote attackers to exhaust system memory and CPU. By sending requests using the --zt Zstandard compression alias, an attacker can bypass security directives and spawn an excessive number of worker threads. Mitigation If the rsync daemon is unused,...