MYSQL-UDF-Exploit

MYSQL-UDF-Exploit Exploit de UDF para MySQL...

CVE-2023-39593

MariaDB 10.5 Ejecución de código autenticado - sysexec Esta guía proporciona instrucciones detalladas para explotar una vulnerabilidad de Función Definida por el Usuario UDF en MariaDB en un servidor remoto. Estos pasos incluyen la descarga y ejecución de código malicioso en un sistema de base de...

CVE-2024-27766

CVE-2024-27766 MariaDB v11.1 RCE vía UDF — PoC modificado basado en Ant1sec-ops/CVE-2024-27766. Resumen...

UDFPwn-CVE-2012-5613

UDFPwn.py MySQL 4.x/5.0 Linux - Script de automatización de biblioteca dinámica 2 de función definida por el usuario UDF...

Mysql_CVE-2024-27766

Exploit Reproduction Guide affected product version MariaDB 11.1 This guide provides step-by-step instructions to reproduce a User-Defined Function UDF attack on a database system. Please note that this exploit may work on some systems, but it might not function correctly on 64-bit architectures ...

CVE-2026-89525

A flaw was found in the Linux kernel. A local attacker could craft a malicious Universal Disk Format UDF image to trigger an out-of-bounds read vulnerability in the udfgetpblockvirt15 function. This occurs when the system attempts to read a Virtual Allocation Table VAT index equal to the entry...

AZL-100397 CVE-2026-89525 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. snumentries stores the number of entries in that array, not the highest valid index. The val...

CVE-2026-89525

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. snumentries stores the number of entries in that array, not the highest valid index. The val...

CVE-2026-89525

This vulnerability affects the Linux kernel's UDF 1.50 virtual partition mapping in the function udf_get_pblock_virt15() . The root cause is an off-by-one bounds check : the code rejected only indexes greater than s_num_entries, but valid VAT indexes are strictly below that value. A crafted UDF i...

EUVD-2026-76431

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. snumentries stores the number of entries in that array, not the highest valid index. The val...

CVE-2026-89525 udf: reject VAT indexes equal to the entry count

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. snumentries stores the number of entries in that array, not the highest valid index. The val...

CVE-2026-89525 udf: reject VAT indexes equal to the entry count

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. snumentries stores the number of entries in that array, not the highest valid index. The val...

PT-2026-90241

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. s num entries stores the number of entries in that array, not the highest valid index. The...

Serious-Sam---CVE-2021-36934-Mitigation-for-Datto-RMM

Overview This is a Datto RMM component to mitigate CVE-2021-36934, aka Serious SAM. It follows the mitigation measures outlined at: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 USE AT YOUR OWN RISK. EXPECT THIS TO BREAK SOME BACKUPS...

CVE-2026-32710

CVE-2026-32710 Heap buffer overflow in MariaDBJSONSCHEMAVALID → persistent privilege escalation → UDF RCE | ---|--- Affected| MariaDB 11.4.x confirmed on 11.4.9 Bug| OOB write in jsongetnormalizedstring — strncpy into 128-byte DYNAMICSTRING with no bounds check Impact| SELECT-only user → ALL...

CVE-2026-69573

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

MiracleLinux 8 : kernel-4.18.0-553.155.1.el8_10 (AXSA:2026-1705:70)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1705:70 advisory. kernel: udf: fix partition descriptor append bookkeeping CVE-2026-45991 kernel: ice: fix double-free of txbuf skb CVE-2026-53009 Tenable has extract...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098917)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098917 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udfloadvat takes the virtual...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098798 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated...