CVE-2024-22894

CVE-2024-22894 Загружена последняя версия прошивки теплового насоса wp2reg-V3.88.0-9015 с https://www.heatpump24.com/DownloadArea.php. Внутри этой прошивки находится файл: wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow Он содержит зашифрованный 3DES паро...

Shadow-Vault

Shadow Vault 🔐 Shadow Vault 는 시스템 관리자 가 공유 호스팅 환경에서 shadow 파일에 새 사용자 자격 증명을 안전하게 추가할 수 있도록 설계된 경량 PHP 웹 도구입니다. 기존 shadow aging 형식을 자동으로 감지하고, SHA-512 비밀번호 해싱을 사용하며, 여러 쓰기 대체 방법을 지원하고, cPanel 웹메일포트 2096에 대한 원클릭 자동 로그인 까지 제공합니다. ⚠️ 고지 : 이 도구는 합법적인 서버 관리 전용 으로 제작되었습니다. 귀하가 소유하지 않은 시스템에 대한 무단 접근 또는 사용...

public-passwd

!WARNING 직접 소유하거나 테스트 권한이 있는 시스템에서만 사용하십시오. 실패 시 시스템을 재부팅할 수 없을 경우 루트 셸을 열어 두는 것이 좋습니다. 루트 권한 없이는 /etc/shadow의 페이지 캐시를 지울 수 없을 수 있기 때문입니다. public-passwd CVE-2026-46333 및 CVE-2026-31431을 사용하여 루트로 권한 상승하지 않고도 모든 사용자의 비밀번호를 변경할 수 있습니다. 사용법 root@kitploit: python passwd.py 인자 없이 명령을 실행하면 현재 shadow 파일에...

CVE-2024-14027_slop

CVE-2024-14027 - SlopSploit 이 익스플로잇은 6.6.51 커널에서 Qemu debian 설치를 사용하여 테스트되었습니다. exploit.c - shadow 파일을 유출합니다. exploitdc.c - 더블 클로즈double close 방식을 시연하여 루트 셸을 획득합니다. WRITEUP.md - LLM이 생성한 분석 보고서입니다. 이 프로젝트는 LLMOpus 4.6을 사용하여 grsecurity에서 설명한 동일 유형 객체 재사용same-type object reuse 취약점을 악용하는 실험이었습니다...

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "Обнаружена уязвимость, связанная с переходом по символическим ссылкам, затрагивающая Qsync Central. При эксплуатации...

CVE-2024-24919_POC

CVE-2024-24919POC CVE-2024-24919-POC에 대한 개념 증명Proof of Concept입니다. 발견된 후에 제가 만들었습니다. CVE-2024-24919 Checkpoint 보안 게이트웨이 정보 노출 취약점입니다. 에서 Notion-CVE-2024-24919POC를 통해 확인할 수 있습니다. Shodan dork: title:"Check Point" "Server: Check Point SVN" "X-UA-Compatible: IE=EmulateIE7" Payload...

Astra Linux – Vulnerability in sudo

In Sudo version 1.8.29, the fact that a user has been blocked for example, by using the “!” character in the shadow file instead of a password hash was not taken into consideration. This allows an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The...

CVE-2026-19900 LB-LINK X-PRO shadow hard-coded credentials

A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The...

policycoreutils: policycoreutils: TOCTOU race condition in fixfiles allows arbitrary SELinux label manipulation

A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker...

CVE-2026-19079

A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-19079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles...

Konica Bizhub Multifunction Printers Insufficiently Protected Credentials (CVE-2022-29588)

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

MAL-2026-10509 Malicious code in test_adminet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1971734ce6221624b53d3647a5881c1fe0bc7f8ae4d383a5ff2a9f5080da57c The package's package.json declares a preinstall hook that runs index.js. On npm install, index.js uses childprocess.exec to curl-POST installer...

CVE-2026-52533

An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file...

CVE-2026-52533

An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file...

CVE-2026-52533

CVE-2026-52533 affects D-Link DIR-1253 v1.0.1.250923.142435. The issue enables privilege escalation via the etc/shadow component file. Details across connected sources consistently describe the same affected product and vector; no exploit steps or patches are provided in the supplied documents. T...

Malicious code in date-fns-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4694a079d83e33dcee7f87140c41737009d9f0b19f351c23f2ae3dbce9a47a51 [email protected] presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs automatically on npm install. T...

kernel: Read root-owned files as an unprivileged user

A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully...

CVE-2026-47833

setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process inside a bpm container can cause root to chown an arbitrary host file to vcap and append bpm JSON log lines to it. The chown alone lets the attacker take ownersh...

CVE-2026-47833

setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process inside a bpm container can cause root to chown an arbitrary host file to vcap and append bpm JSON log lines to it. The chown alone lets the attacker take ownersh...