4594 matches found
Malicious code in @walknpm/todo-cli (npm)
@walknpm/[email protected] is a new release of a todo-list CLI and web app whose only change from 2.0.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to /tmp/.smh; as root or with...
Persistnux
Persistnux A comprehensive Linux persistence detection tool for Digital Forensics and Incident Response DFIR investigations. Overview Persistnux is a bash-based tool designed to identify known Linux persistence mechanisms used by attackers to maintain access to compromised systems. It performs...
cs50-cybersecurity-final-project
Technical Analysis of the XZ Utils Backdoor CVE-2024-3094 Video URL: https://www.youtube.com/watch?v=6hpVp7prlO8 Overview This repository contains the final project for CS50's Introduction to Cybersecurity. The project provides a thorough technical analysis of the supply chain attack on XZ Utils...
CVE-2025-6018
CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 中文 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp...
CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp...
Malicious code in @walknpm/todo-cli (npm)
@walknpm/[email protected] is a new release of a todo-list CLI and web app whose only change from 2.0.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to /tmp/.smh; as root or with...
columbus-server
Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...
CLSA-2026-1792442514 cifs-utils: Fix of CVE-2022-27239
CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support...
CLSA-2026-1792442320 cifs-utils: Fix of CVE-2022-27239
CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support...
Astra Linux – Vulnerability in Systemd
In udev under systemd, before version 260, local root execution could occur through malicious hardware devices and unsanitized kernel output...
Astra Linux – Vulnerability in Systemd
Before version 247, systemd does not properly prevent local privilege escalation for certain Sudo configurations. For example, plausible sudoers files may allow the execution of the “systemctl status” command. Specifically, systemd does not set LESSSECURE to 1, allowing other programs to be...
Astra Linux – Vulnerability in cups
OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, there was an integer underflow vulnerability in the ppdCreateFromIPP function cups/ppd-cache.c. This vulnerability allowed any unprivileged local user to crash the...
Exploit for Privilege Chaining in Canonical Ubuntu_Linux
CVE-2026-3888: snap-confine and systemd-tmpfiles race This re...
Rocky Linux 9.6 [CIQ] Security Update: rhel-net-naming-sysattrs / systemd / systemd-boot-unsigned / etc Multiple Vulnerabilities (ciqsa-2026_1638)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261638 advisory. This advisory aggregates security fixes for the systemd SRPM in CIQ LTS 9.6. It addresses 11 CVEs: CVE-2018-15688, CVE-2019-6454, CVE-2020-1712,...
Exploit for Incorrect Authorization in Systemd_Project Systemd
Exploit-CVE-2026-40224 CVE-2026-40224: systemd-machined local...
needrestart
needrestart Informazioni needrestart verifica quali demoni devono essere riavviati dopo gli aggiornamenti delle librerie. Si ispira a checkrestart del pacchetto debian-goodies. Nella directory ex/ ci sono alcuni script hook da usare con apt e dpkg. Gli script chiameranno needrestart dopo ogni...
uptux
uptux Chequeos especializados de escalada de privilegios para sistemas Linux. Implementados hasta ahora: Rutas de systemd, servicios, temporizadores y unidades de socket escribibles Desensambla archivos de unidad systemd buscando: Referencias a ejecutables que son escribibles Referencias a enlace...
lxd_root
Privilege Escalation di Linux tramite LXD Panoramica I membri del gruppo locale lxd sui sistemi Linux hanno numerose strade per elevare i propri privilegi a root. Questo repository contiene esempi di exploit locali completamente automatizzati. Una spiegazione dettagliata della vulnerabilità e...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INTMAX When sysctlnropen is set to a very high value for example, 1073741816 as set by systemd, processes attempting to use file descriptors near the limit may trigger massi...