USP

USP Features This Go program establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload binary or script. It offers two trigger options: USB Persistence: The payload is executed whenever a USB device is inserted. Boot Persistence: The...

linux-root-kit

About This Project This project was developed as part of the Digitale Forensik course at the Technische Hochschule Deggendorf. It demonstrates a full forensic investigation and attack simulation involving: A Python dependency confusion attack using a malicious PyPI package Privilege escalation vi...

mtechweek_04

mtechweek04 Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC CVE-2004-2687, privilege escalation via udev netlink CVE-2009-1185, and vsftpd 2.3.4 backdoor analysis CVE-2011-2523, with firewall mitigation validated end-to-end. This repository...

EulerOS 2.0 SP12 : sg3_utils (EulerOS-SA-2026-4532)

According to the versions of the sg3utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...

Astra Linux – vulnerability in freerdp3, freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.22.0, the URBDRC client used server-provided interface numbers as array indices without any bounds checks, resulting in an out-of-bounds read in libusbudevselectinterface. This vulnerability has been fixed in...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Revert “i2c: i801: replace acpilock with I2C bus lock” This reverts commit f707d6b9e7c18f669adfdb443906d46cfbaaa0c1. Under rare circumstances, multiple udev threads can collect i801 device information during boot and...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two issues related to recursive correction: 1. It can lead to denial-of-service conditions. In fecreadbufs, there is a loop with 253 iterations. Each iteration...

Astra Linux – vulnerability in systemd

In udev in systemd prior to version 260, local root execution can occur via malicious hardware devices and un sanitized kernel output...

Astra Linux – vulnerability in freerdp3, freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.22.0, urbselectinterface could free the device’s MS configuration on error; however, later code still dereferenced it, resulting in a use-after-free condition in libusbudevselectinterface. This vulnerability has...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edacmcalloc When the mci-pvtinfo allocation in edacmcalloc fails, the error path calls putdevice, which ultimately invokes the device’s release function. However, the initialization order is...

CLSA-2026-1792174065 libinput: Fix of CVE-2026-50292

CVE-2026-50292: sanitize phys sysattr to prevent udev property injection...

CLSA-2026-1792170117 libinput: Fix of CVE-2026-50292

CVE-2026-50292: sanitize phys sysattr to prevent udev property injection...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev-descriptor in hubportinit Syzbot reported an out-of-bounds read in sysfs.c:readdescriptors: BUG: KASAN: slab-out-of-bounds in readdescriptors+0x263/0x280 drivers/usb/core/sysfs.c:883 Re...

EulerOS 2.0 SP13 : sg3_utils (EulerOS-SA-2026-4106)

According to the versions of the sg3utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...

EulerOS 2.0 SP11 : sg3_utils (EulerOS-SA-2026-4289)

According to the versions of the sg3utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...

EulerOS 2.0 SP13 : sg3_utils (EulerOS-SA-2026-4197)

According to the versions of the sg3utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...

Rocky Linux 9.6 [CIQ] Security Update: WALinuxAgent / WALinuxAgent-cvm / WALinuxAgent-udev (ciqsa-2026_1629)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261629 advisory. This advisory aggregates security fixes for the WALinuxAgent SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2019-0804. Tenable has extracted the preceding descripti...

Rocky Linux 9.2 [CIQ] Security Update: WALinuxAgent / WALinuxAgent-cvm / WALinuxAgent-udev (ciqsa-2026_1619)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261619 advisory. This advisory aggregates security fixes for the WALinuxAgent SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2019-0804. Tenable has extracted the preceding descripti...

TencentOS Server 2: sg3_utils (TSSA-2026:1086)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1086 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

AlmaLinux 9.2 [TuxCare] Security Update: sg3_utils / sg3_utils-devel / sg3_utils-libs (ALMALINUX9.2:CLSA-2026:1788364105)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788364105 advisory. - A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizi...