UDFPwn-CVE-2012-5613

UDFPwn.py MySQL 4.x/5.0 Linux - 사용자 정의 함수UDF 동적 라이브러리2 자동화 스크립트...

Mysql_CVE-2024-27766

취약점 재현 가이드 영향받는 제품 버전 MariaDB 11.1 이 가이드는 데이터베이스 시스템에서 사용자 정의 함수User-Defined Function, UDF 공격을 재현하는 단계별 지침을 제공합니다. 이 익스플로잇은 일부 시스템에서 작동할 수 있지만, 64비트 아키텍처나 특정 빌드에서는 올바르게 작동하지 않을 수 있습니다. 경고: 이 내용은 교육 목적으로만 제공됩니다. 이 기술을 무단으로 사용하는 것은 불법이며 비윤리적입니다. 공격 재현 단계 1. UDF 코드 다운로드 및 준비 먼저 exploit.c 파일을 만들고 다음...

CVE-2026-32710

CVE-2026-32710 MariaDBJSONSCHEMAVALID におけるヒープバッファオーバーフロー → 永続的な権限昇格 → UDF RCE | ---|--- 影響を受けるバージョン| MariaDB 11.4.x（11.4.9 で確認） バグ| jsongetnormalizedstring における OOB 書き込み — 境界チェックなしで 128 バイトの DYNAMICSTRING に strncpy を実行 影響| SELECT のみのユーザー → ALL PRIVILEGES WITH GRANT OPTION → UDF による任意コマンド実行 ソース|...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782155469)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782155469 advisory. - In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_54247)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654247 advisory. kernel: udf: fix partition descriptor append bookkeeping CVE-2026-45991 kernel: ice: fix double-free of txbuf skb CVE-2026-53009 Tenable has extracted the...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782155469)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782155469 advisory. - In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundar...

CentOS Linux 7 [TuxCare] Security Update: grub2 / grub2-common / grub2-efi-ia32 / grub2-efi-ia32-cdboot / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1771332544)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1771332544 advisory. - When reading data from disk, the grub's UDF filesystem module utilizes the user controlled data length metadata to allocate its intern...

MYSQL-UDF-Exploit

MYSQL-UDF-Exploit MYSQL UDF 익스플로잇...

Serious-Sam---CVE-2021-36934-Mitigation-for-Datto-RMM

개요 이것은 CVE-2021-36934, 일명 Serious SAM을 완화하기 위한 Datto RMM 구성 요소입니다. 다음에 설명된 완화 조치를 따릅니다: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 사용에 따른 책임은 본인에게 있습니다. 이로 인해 일부 백업이 일시적으로 중단될 수 있습니다. 기본적인 오류 검사만 적용되어 있습니다. 사용법 구성 요소를 Datto RMM에 업로드하고...

CVE-2023-39593

MariaDB 10.5 인증된 코드 실행 - sysexec 이 가이드는 원격 서버의 MariaDB에서 사용자 정의 함수UDF 취약점을 악용하는 방법에 대한 상세한 지침을 제공합니다. 이 단계에는 취약한 데이터베이스 시스템에서 악성 코드를 다운로드하고 실행하는 과정이 포함됩니다. 경고: 이 문서는 교육 목적으로만 작성되었습니다. 이러한 기술을 무단으로 사용하는 것은 불법이며 비윤리적입니다. 공격 재현 단계 1. MariaDB 원격 호스트에 연결 다음 명령어를 사용하여 MySQL 서버에 연결합니다: mysql -h...

CVE-2024-27766

CVE-2024-27766 MariaDB v11.1 RCE via UDF — 수정된 PoC 기반: Ant1sec-ops/CVE-2024-27766 개요 | ---|--- 영향받는 버전| MariaDB v11.1 수정된 버전| 10.5.25 / 10.6.18 / 10.11.8 / 11.0.6 / 11.1.5 / 11.2.4 / 11.4.2+ 유형| 사용자 정의 함수UDF를 통한 RCE MariaDB v11.1은 충분한 데이터베이스 권한FILE 권한 + 플러그인 디렉토리 쓰기 권한을 가진 공격자가 악의적인 UDF를 등록하고 이를 ...

kernel: Fix of 56 CVEs

usb: free iso schedules on failed submit CVE-2026-64348 - udf: validate VAT header length against the VAT inode size CVE-2026-64323 - USB: idmouse: fix use-after-free on disconnect race CVE-2026-64344 - USB: ldusb: fix use-after-free on disconnect race CVE-2026-64343 - USB: iowarrior: fix...

Linux Distros Unpatched Vulnerability : CVE-2026-93055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UDF symlink pathComponent header OOB read udfsymlinkfiller can enter udfpctochar with a partial pathComponent header. Validate that enough input remains for a...

Linux Distros Unpatched Vulnerability : CVE-2026-93140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: Mark LVID buffer as uptodate before marking it dirty When an I/O error occurs while writing the Logical Volume Integrity Descriptor LVID buffer to the bloc...

AZL-102945 CVE-2026-93140 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking it dirty When an I/O error occurs while writing the Logical Volume Integrity Descriptor LVID buffer to the block device, the block layer's completion handler endbufferwritesync...

CVE-2026-93140

In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking it dirty When an I/O error occurs while writing the Logical Volume Integrity Descriptor LVID buffer to the block device, the block layer's completion handler endbufferwritesync...

DEBIAN-CVE-2026-93140

In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking it dirty When an I/O error occurs while writing the Logical Volume Integrity Descriptor LVID buffer to the block device, the block layer's completion handler endbufferwritesync...

CVE-2026-93055

In the Linux kernel, the following vulnerability has been resolved: UDF symlink pathComponent header OOB read udfsymlinkfiller can enter udfpctochar with a partial pathComponent header. Validate that enough input remains for a complete pathComponent header before accessing it. Reject malformed...

AZL-102602 CVE-2026-93055 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: UDF symlink pathComponent header OOB read udfsymlinkfiller can enter udfpctochar with a partial pathComponent header. Validate that enough input remains for a complete pathComponent header before accessing it. Reject malformed...

CVE-2026-93140 udf: Mark LVID buffer as uptodate before marking it dirty

In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking it dirty When an I/O error occurs while writing the Logical Volume Integrity Descriptor LVID buffer to the block device, the block layer's completion handler endbufferwritesync...