uac

类 Unix 系统证据收集工具 UAC 关于 • 文档 • 主要特性 • 支持的操作系统 • 使用方法 • 贡献指南 • 支持 • 许可协议 🔎 关于 UAC UAC（Unix-like Artifacts Collector） 是一款功能强大且可扩展的事件响应工具，专为取证调查人员、安全分析师和 IT 专业人员设计。它能自动从广泛的类 Unix 系统（包括 AIX、ESXi、FreeBSD、Linux、macOS、NetBSD、NetScaler、OpenBSD 和 Solaris）中收集证据。 无论您是在处理入侵事件、进行取证调查还是执行合规检查，UAC...

onionjuggler

OnionJuggler 符合 POSIX 规范的 shell 脚本，功能丰富的洋葱服务管理器，适用于类 Unix 操作系统 OnionJuggler 是一套轻量依赖、可移植的脚本和文档集合，旨在帮助服务运营者管理其洋葱服务。 警告：请勿信任此仓库，请在其他位置备份你的 hs 密钥。本项目尚未发布，仅作开发用途。 本仓库快速链接：git.io/onionjuggler 目录 介绍 图片 历史 目标 特性 需求 兼容性 使用说明 克隆仓库 设置自定义变量 搭建环境 使用方法 被收录于 贡献者 介绍 图片 历史 本项目的灵感来源于出色的 OnionShare CLI Python...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

pkexec-exploit

pkexec-exploit Escalada de privilegios local en pkexec de polkit CVE-2021-4034 Resumen Polkit anteriormente PolicyKit es un componente para controlar los privilegios a nivel de sistema en sistemas operativos tipo Unix. Proporciona una forma organizada para que los procesos sin privilegios se...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-jdbc (UTSA-2023-002182)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002182 advisory. pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or...

UBUNTU-CVE-2026-53534

JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.getCommand passes it through...

Astra Linux – Vulnerability in Netty

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high-performance protocol servers and clients. Before version 4.1.59.Final, there was a vulnerability on Unix-like systems involving an insecure temporary file. When Netty’s...

CVE-2026-54552: Improper Check for Dropped Privileges

sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with uid set to an unprivileged user, the child changes its UID but can retain the paren...

CVE-2026-17997 vulnerabilities

Vulnerabilities for packages: chromium...

PYSEC-2026-3548 AWS CLI: Overly permissive File Permissions

Summary The AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host...

Updated perl-DBI packages fix security vulnerabilities

The updated packages fix several security issues...

AWS CLI: Overly permissive File Permissions

Summary The AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host...

EUVD-2026-41116

AWS CLI: Overly permissive File Permissions...

CVE-2026-64075

In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregisterfprobe to wait for RCU grace period Commit 4346ba1604093 "fprobe: Rewrite fprobe on function-graph tracer" changed fprobe to register struct fprobe to an rcu-hlist, but it forgot to wait for RCU GP. Thus the...

CVE-2026-63856

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v2.0 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

The vulnerability of the FRRouting software implementation for Unix-like systems lies in improper privilege assignment, which allows attackers to elevate their own privileges.

The vulnerability of the FRRouting software implementation for Unix-like systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the fact that it allows for arbitrary code to be executed by writing beyond the buffer boundaries in memory.

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-15133 vulnerabilities

Vulnerabilities for packages: chromium...

The vulnerability of OSPF traffic analyzer and TLV segment routing analysis in the software for network routing on Unix-like systems allows attackers to cause service interruptions.

The vulnerability of OSPF traffic analyzer and TLV segment routing analysis tools used in Unix-based systems for network routing implementation is related to integer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the createconfig path in awscli/customizations/codedeploy/register.py. An attacker can read the CodeDeploy on-premises configuration file by accessing it on the same Unix-like ho...