CVE-2019-18634

CVE-2019-18634 N-Day Exploit Slides https://docs.google.com/presentation/d/11DpUy9LlHeuPRSgzaTARHPwlq01vyyqbnJURlG9Ss/edit?usp=sharing Requisiti Ubuntu 20.04 sudo 1.8.25 vedi sotto per come compilarlo manualmente Python3 pwntools Abilita pwfeedback root@kitploit: sudo visudo Cambia questa riga...

sudo-exploit

Utilizzo Nota: la directory libnssX deve essere presente nella directory di lavoro corrente durante l'esecuzione dell'exploit ubuntu 18.04 ubuntu 20.04...

CVE-2021-3156

CVE-2021-3156 nssloadlibrary versione root@kitploit: No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04 LTS Release: 20.04 Codename: focal GNU C Library Ubuntu GLIBC 2.31-0ubuntu9 stable release version 2.31. Sudo 版本 1.8.31 Sudoers 策略插件版本 1.8.31 Sudoers 文件语法版本 46 Sudoe...

PE_CVE-CVE-2021-3156

PECVE-CVE-2021-3156 Exploit per Ubuntu 20.04 che utilizza CVE-2021-3156, migliorato con semplici e automatizzati script di post-exploitation Oltre alla shell di root puoi avere: -A file .txt con tutte le chiavi ssh idrsa configurate sul server. Vedi lo script: getallsshkeys.sh -A eseguibile...

CTF-2021

CTF-2021 Note Questo CTF non utilizza un database per l'autenticazione. Inoltre, questo CTF genera token statici per i seguenti motivi: 1. Ridurre al minimo le probabilità che un utente risolva questo CTF in un modo diverso 2. Ridurre al minimo le probabilità che un utente perda indizi modificand...

CVE-2021-3156

CVE-2021-3156 PoC de shell root para CVE-2021-3156 sem bruteforce Para fins educacionais, etc. Testado no Ubuntu 20.04 com sudo 1.8.31 Crédito da pesquisa: Qualys Research Team Confira os detalhes no blog deles. Você pode verificar se sua versão do sudo é vulnerável com: $ sudoedit -s Y. Se pedir...

CVE-2020-16125-Reproduction

CVE-2020-16125-Reproduction Questo repository ha lo scopo di riprodurre l'attacco . Descrizione : Il suo nome originale è “Ubuntu gdm3 privilege escalation” , ed è stata trovata da un ricercatore di sicurezza di Github di nome Kevin Backhouse . Il suo punteggio CVSS è 4.6/10 medio e l'ambiente...

CVE-2021-3156

CVE-2021-3156 Root shell PoC для CVE-2021-3156 без брутфорса Для образовательных целей и т.д. Протестировано на Ubuntu 20.04 с sudo 1.8.31 Вся заслуга в исследовании: Qualys Research Team Подробности смотрите в их блоге. Вы можете проверить, уязвима ли ваша версия sudo, с помощью: $ sudoedit -s Y...

CVE-2019-18634

CVE-2019-18634 funktionierender Python-Exploit auf Ubuntu 20.04, sudo Version 1.8.25 ersetzen Sie "./shell.sh" durch Ihre Reverse-Shell Dokumentation unter https://y3a.github.io/2021/04/17/sudo-cve-analysis/...

LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus

DirtyPipevirus Dirty Pipe ist eine Art Linux-Exploit. Die zugehörige CVE-Nummer ist CVE 2022-0847. Wir verwenden ihn, um alle Dateien auf deinem Ubuntu zu löschen. Umgebung: Ubuntu 20.04 Linux Kernel 5.8 Dies ist die OVA-Datei von Ubuntu 20.04:...

CVE-2022-37706

Descrizione Preso da https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2022-37706. Testato su: root@kitploit: Distributor ID: Ubuntu Description: Ubuntu 20.04.6 LTS Release: 20.04 Codename: focal UTILIZZO 1. Copia/Carica l'exploit sulla macchina vulnerabile. 2. Esegui il comando bash...

Ubuntu 20.04 LTS : Linux kernel (KVM) vulnerabilities (USN-8667-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8667-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in...

Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8668-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8668-1 advisory. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations,...

netsec-project

Nome del Progetto Script di attacco CVE-2021-22555 Descrizione Questo progetto è uno strumento di attacco automatico implementato in Python. Esegue vari test di sicurezza e attacchi su un sistema target che esegue Ubuntu 20.04 con versione del kernel 5.8.0-48. Lo strumento include funzionalità co...

ROOT-OS-UBUNTU-2004-CVE-2024-10041 CVE-2024-10041 in pam - Patched by Root

Root has patched CVE-2024-10041 in the pam package for Root:Ubuntu:20.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2004-CVE-2025-68973 CVE-2025-68973 in gnupg2 - Patched by Root

Root has patched CVE-2025-68973 in the gnupg2 package for Root:Ubuntu:20.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2004-CVE-2025-32462 CVE-2025-32462 in sudo - Patched by Root

Root has patched CVE-2025-32462 in the sudo package for Root:Ubuntu:20.04. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-16392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16392 Note that Nessus...

USN-8412-3 qemu regression

USN-8412-1 fixed vulnerabilities QEMU. On Ubuntu 20.04 LTS, the fix for CVE-2024-4467 was incomplete and prevented the creation of boot volumes from qcow2 images. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Felipe Franciosi, Raphael Norwitz, and...

USN-8457-2 mysql-8.0 vulnerabilities

USN-8457-1 fixed several vulnerabilities in MySQL. This update provides the corresponding fixes for MySQL on Ubuntu 20.04 LTS Original advisory details: It was discovered that MySQL Router incorrectly handled repeated TLS protocol upgrade requests. An unauthenticated remote attacker could possibl...