131 matches found
CVE-2021-4034
Tesina CVE-2021-4034 PwnKit Questo repository contiene i materiali, gli esempi di codice e la documentazione per la tesina nell'ambito del modulo opzionale Sicurezza Informatica Applicata sulla vulnerabilità CVE-2021-4034 , nota anche come PwnKit. Riassunto La presente tesina nell'ambito del modu...
cve-2026-31431-checker
CVE-2026-31431 "Copy Fail" — Script di rilevamento vulnerabilità Scanner basato su shell per CVE-2026-31431 "Copy Fail" , una vulnerabilità di escalation dei privilegi locale nel sottosistema crittografico del kernel Linux algifaead / interfaccia AFALG. Un utente locale non privilegiato può...
CVE-2026-31431
🔥 CVE-2026-31431 - "Copy Fail !!!" Un'escalation dei privilegi locali sorprendentemente semplice ma letale nel kernel Linux 📌 Panoramica CVE-2026-31431 soprannominata "Copy Fail" è una vulnerabilità di escalation dei privilegi locali nel sottosistema crittografico del kernel Linux, che colpisce i...
CVE-2021-41091
CVE-2021-41091 Este exploit oferece uma análise aprofundada da vulnerabilidade de segurança CVE-2021-41091 e fornece um guia passo a passo sobre como utilizar o script de exploit para obter escalonamento de privilégios em um host. Resumo da Vulnerabilidade CVE-2021-41091 é uma falha no Moby Docke...
CVE-2025-57489
CVE-2025-57489 Descrizione Dal blog dello sviluppatore: Quando il lucchetto in SuperDuper è sbloccato per consentire l'esecuzione senza dover inserire una password di amministratore, un programma di terze parti potrebbe utilizzare la nostra autorizzazione per eseguire qualcosa di diverso da un...
CVE-2026-46331-pedit-cow
CVE-2026-46331-pedit-cow Ausarbeitung und Exploitationsschritte für die pedit-COW-Schwachstelle CVE-2026-46331. Übersicht Diese Herausforderung demonstriert pedit COW, einen Linux-Kernel-Fehler in der Paketbearbeitungsaktion actpedit des Traffic-Control-Subsystems. Die Schwachstelle ermöglicht es...
CVE-2026-49414
The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen. An unprivileged local user ca...
CVE-2026-45257
The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and safe to modify. This assumption does not hold for data placed on a socket by sendfile2, which can reference file-backed memory directly through non-anonymous MEXTPG pages or...
EUVD-2026-39780
The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and safe to modify. This assumption does not hold for data placed on a socket by sendfile2, which can reference file-backed memory directly through non-anonymous MEXTPG pages or...
FreeBSD : FreeBSD -- Arbitrary file overwrite via the KTLS receive path (f2c4892a-6472-11f1-958d-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f2c4892a-6472-11f1-958d-bc241121aa0a advisory. The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data wer...
EulerOS 2.0 SP13 : polkit (EulerOS-SA-2026-2307)
According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1...
CentOS 9 : polkit-0.117-16.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the polkit-0.117-16.el9 build changelog. - A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1...
Exploit for Write-what-where Condition in Linux Linux_Kernel
CVE-2026-43284 xfrm/ESP page cache write exploit, 4 byte primit...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 - Linux Kernel AFALG "Copy Fail" Local Privile...
EUVD-2026-30510
VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...
CVE-2026-41702
VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...
CVE-2026-41702 TOCTOU local privilege escalation vulnerability
VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 — Copy Fail Linux kernel local privilege esc...