lxd-group-privesc-report

LXD Root Повышение локальных привилегий до root через членство в группе lxd по умолчанию и пакет lxd-installer в Ubuntu. Демонстрация выполняется на AWS EC2 Ubuntu Server 26.04 Ошибка в том, что установка Ubuntu Server 26.04 по умолчанию молча предоставляет основному пользователю членство в групп...

raven

Raven Внешний C2 для CobaltStrike поверх Websockets Дополнительная информация: https://www.cobaltstrike.com/help-externalc2 Сборка сервера Ubuntu Скопируйте папку сервера на ваш VPS. Запустите ./setup.sh от имени root или через sudo Сборка клиента Windows Скопируйте папку клиента на хост разработ...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Vérifiez CVE-2020-11932 et testez les hôtes liés à cette vulnérabilité Utilisation Téléchargement root@kitploit: git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh Avec curl sans téléchargement root@kitploi...

my-cve-2021-4034-poc

my-cve-2021-4034-poc 내 PoC 빠르고 대충 만든 코드, 대학 때문에 바빠서 그랬음, 내 우분투 서버에서 작동함...

ssh-enum

ssh-enum Étude de validation statistique de CVE-2016-6210 Une réinvestigation reproductible de l'énumération de noms d'utilisateur OpenSSH par analyse statistique. Ce projet réinvestit CVE-2016-6210 , un canal auxiliaire temporel documenté d'OpenSSH, afin de déterminer s'il reste observable sur u...

wongpress

Exploitation Réelle de Débordement de Tampon et Vulnérabilités de Chaîne de Format pour Obtenir un RCE sur Ubuntu Server CVEs Connexes CVE-2024-2961 : Vulnérabilité de débordement de tampon dans la fonction iconv de Glibc CVE-2024-29510 : Vulnérabilité de chaîne de format dans Ghostscript...

Exploit for Protection Mechanism Failure in Artifex Ghostscript

Real Case Exploitation of Buffer Overflow & Format String Vuln...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CopyFail-Fix 🌐 English | Português |...

UBUNTU-CVE-2026-33610

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it...

Canonical Subiquity 安全漏洞

Canonical Subiquity is an Ubuntu server installation program developed by the British company Canonical. Version 24.04.4 of Canonical Subiquity contains a security vulnerability, which stems from improper handling of crash reports and could lead to the exposure of sensitive credentials...

Exploit for Race Condition in Canonical Ubuntu_Linux

Privilege Escalation using the Dirty Cow Kernel Exploit By...

CVE-2019-12164

ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...

EUVD-2019-3813

Malware in sbrugna...

EUVD-2020-4269

Malware in sbrugna...

EUVD-2023-57848

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-11932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered. CVE-2020-11932 Note that Ness...

Exploit for CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, w...

USN-7314-1: Kerberos vulnerabilities

It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. CVE-2024-26458, CVE-2024-26461 It was discovered that Kerberos incorrectly handled certain memory...

Ubuntu 20.04 LTS / 22.04 LTS / 24.10 : nginx vulnerability (USN-7285-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7285-1 advisory. It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address and port. An attacker...

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...