wongpress

Explotación en un Caso Real de Desbordamiento de Búfer y Vulnerabilidades de Cadena de Formato para Obtener RCE en un Servidor Ubuntu CVEs Relacionados CVE-2024-2961 : Vulnerabilidad de desbordamiento de búfer en la función iconv de Glibc CVE-2024-29510 : Vulnerabilidad de cadena de formato en...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Überprüft CVE-2020-11932 und testet den Host auf die Schwachstelle Verwendung Herunterladen root@kitploit: git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh Mit curl ohne Download root@kitploit: bash curl ...

raven

Raven CobaltStrike External C2 for Websockets अतिरिक्त जानकारी: https://www.cobaltstrike.com/help-externalc2 सर्वर बिल्ड Ubuntu सर्वर फ़ोल्डर को अपने VPS पर कॉपी करें। ./setup.sh को root के रूप में या sudo के साथ चलाएँ। क्लाइंट बिल्ड Windows क्लाइंट फ़ोल्डर को एक Windows डेवलपमेंट होस्ट पर कॉपी...

lxd-group-privesc-report

LXD Root Escalação de Privilégio Local para root através da associação padrão ao grupo lxd e do pacote lxd-installer no Ubuntu. Demonstração executada no AWS EC2 Ubuntu Server 26.04 O bug é que a instalação padrão do Ubuntu Server 26.04 concede silenciosamente ao usuário primário a associação ao...

my-cve-2021-4034-poc

my-cve-2021-4034-poc La mia PoC codice rapido e sporco, dato che l'università mi tiene occupato, funziona sul mio server Ubuntu...

ssh-enum

ssh-enum Studio di convalida statistica di CVE-2016-6210 Una ri-indagine riproducibile dell'enumerazione degli username OpenSSH utilizzando l'analisi statistica. Questo progetto riesamina CVE-2016-6210 , un side-channel temporale documentato di OpenSSH, per determinare se rimane osservabile su un...

Exploit for Protection Mechanism Failure in Artifex Ghostscript

Real Case Exploitation of Buffer Overflow & Format String Vuln...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CopyFail-Fix 🌐 English | Português |...

UBUNTU-CVE-2026-33610

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it...

Canonical Subiquity 安全漏洞

Canonical Subiquity is an Ubuntu server installation program developed by the British company Canonical. Version 24.04.4 of Canonical Subiquity contains a security vulnerability, which stems from improper handling of crash reports and could lead to the exposure of sensitive credentials...

Exploit for Race Condition in Canonical Ubuntu_Linux

Privilege Escalation using the Dirty Cow Kernel Exploit By...

CVE-2019-12164

ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...

EUVD-2020-4269

Malware in sbrugna...

EUVD-2019-3813

Malware in sbrugna...

EUVD-2023-57848

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-11932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered. CVE-2020-11932 Note that Ness...

Exploit for CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, w...

USN-7314-1: Kerberos vulnerabilities

It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. CVE-2024-26458, CVE-2024-26461 It was discovered that Kerberos incorrectly handled certain memory...

Ubuntu 20.04 LTS / 22.04 LTS / 24.10 : nginx vulnerability (USN-7285-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7285-1 advisory. It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address and port. An attacker...

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...