428 matches found
tools-for-CVE-2018-1000001
Tools for CVE-2018-1000001 Проверка уязвимости: root@kitploit: $ cat /proc/sys/kernel/unprivilegedusernsclone Вывод: root@kitploit: 1 Если файла "/proc/sys/kernel/unprivilegedusernsclone" не существует: root@kitploit: $ unshare -mU /bin/sh -c "sleep 5" & /bin/sh -c "sleep 1; cd /proc/$!/cwd;...
CVE-2022-1972-infoleak-PoC
CVE-2022-1972 infoleak PoC Эксплойт infoleak для CVE-2022-1972. Вы можете найти соответствующий разбор в нашем блоге Требования Пространства имен пользователей должны быть доступны для непривилегированных пользователей. root@kitploit: $ sysctl kernel.unprivilegedusernsclone...
CVE-2021-3493
CVE-2021-3493 Локальное повышение привилегий в Ubuntu через OverlayFS Затронутые версии Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Использование gcc exploit.c -o exploit ./exploit Описание «Специфическая для Ubuntu проблема в файловой системе...
CVE-2015-1328
CVE-2015-1328 Preuve de Concept Une preuve de concept PoC pour CVE-2015-1328, une vulnérabilité d'escalade de privilèges affectant l'implémentation overlayfs du noyau Linux. Cette vulnérabilité permet à des utilisateurs locaux non privilégiés d'obtenir un accès root en exploitant des vérification...
CVE-2021-3493
CVE-2021-3493 Ubuntu OverlayFS локальное повышение привилегий Затронутые версии Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Использование gcc exploit.c -o exploit chmod +x exploit ./exploit Описание «Специфическая для Ubuntu проблема в файловой системе overlay...
CVE-2024-1086
CVE-2024-1086 Универсальный proof-of-concept эксплойт для локального повышения привилегий через CVE-2024-1086, работающий на большинстве ядер Linux с v5.14 по v6.6, включая Debian, Ubuntu и KernelCTF. Процент успеха составляет 99.4% в образах KernelCTF...
DeepRoot
CVE-2021-3493 Comprehensive Exploit Framework $\colorFF4D2E \textbf\textsfDeepRoot$ OverlayFS Capability Privilege Escalation Framework — Red Team Professional Edition Обзор DeepRoot framework — это комплексный эксплойт для повышения привилегий через уязвимость CVE-2021-3493 OverlayFS Privilege...
CVE-2026-23111
Аудитор CVE-2026-23111 Linux Kernel nftables UAF Этот репозиторий содержит автоматизированный скрипт аудита на Bash , предназначенный для глубокой и точной оценки уязвимости CVE-2026-23111 в средах Linux. 🔍 Что такое уязвимость CVE-2026-23111? CVE-2026-23111 — это уязвимость типа Use-After-Free U...
CVE-2021-3493
CVE-2021-3493 Ubuntu OverlayFS Lokale Rechteausweitung Betroffene Versionen Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Verwendung gcc exploit.c -o exploit chmod +x exploit ./exploit Beschreibung „Ubuntu-spezifisches Problem im OverlayFS-Dateisystem des...
CVE-2022-2588
CVE-2022-2588 La correzione Il bug è stato corretto in Linux v5.19 con questo commit. Il bug Il bug è stato introdotto in Linux v3.17 con questo commit nel 2014. Richiede User Namespaces per essere attivato. Questo bug è molto simile a CVE-2021-3715, causato da operazioni improprie sulla lista...
CVE-2026-68335
In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdsfindbound looks up the destination socket using a global rhashtable keyed solely on addr, port, scopeid. Network namespaces are not part of the key, so a send...
CVE-2026-68186
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...
EUVD-2026-55287
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...
CVE-2026-18107
A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...
OESA-2026-3176 buildah security update
The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...
MiracleLinux 8 : kernel-4.18.0-553.143.1.el8_10 (AXSA:2026-1337:51)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1337:51 advisory. - net/sched: ets: Always remove class from active list before deleting in etsqdiscchange CVE-2025-71066 - kernel: stale page table entries in IOMMU...
Linux Distros Unpatched Vulnerability : CVE-2026-63981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Fix blockcast recursion bypass leading to stack overflow tcfmirredact...
PT-2026-61298
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack overflow occurs in the Linux kernel due to a recursion bypass in the tcf mirred act function. The function uses a counter sched mirred nest to limit recursion depth, but when the...
Important: kernel6.12
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path CVE-2026-53362 In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path CVE-2026-53366...
