428 matches found
docker_cve-2015-2925
Docker + CVE-2015-2925 = --volume से बच निकलना लिनक्स में हालिया कमज़ोरी जो लगभग आधे साल कई महीनों से सार्वजनिक से ज्ञात है, ने bind mounts से बच निकलना संभव बना दिया है। विशेष रूप से Docker के मामले में, --volume विकल्प के माध्यम से माउंट किए गए निर्देशिका के अंदर से संबंधित होस्ट के फ़ाइलसिस्टम...
CVE-2024-1086
CVE-2024-1086 Preuve de concept universelle d'escalade de privilèges locaux pour CVE-2024-1086, fonctionnant sur la plupart des noyaux Linux entre v5.14 et v6.6, y compris Debian, Ubuntu et KernelCTF. Le taux de réussite est de 99,4 % dans les images KernelCTF...
tools-for-CVE-2018-1000001
أدوات لـ CVE-2018-1000001 التحقق من الثغرة: root@kitploit: $ cat /proc/sys/kernel/unprivilegedusernsclone الإخراج: root@kitploit: 1 إذا كان الملف "/proc/sys/kernel/unprivilegedusernsclone" غير موجود: root@kitploit: $ unshare -mU /bin/sh -c "sleep 5" & /bin/sh -c "sleep 1; cd /proc/$!/cwd; realpat...
CVE-2022-1972-infoleak-PoC
CVE-2022-1972 إثبات مفهوم تسريب المعلومات استغلال تسريب المعلومات للثغرة CVE-2022-1972. يمكنك العثور على التحليل المرتبط في مدونتنا المتطلبات يجب أن تكون user namespaces متاحة للمستخدمين غير المميزين. root@kitploit: $ sysctl kernel.unprivilegedusernsclone kernel.unprivilegedusernsclone = 1 البناء...
CVE-2021-3493
CVE-2021-3493 Локальное повышение привилегий в Ubuntu через OverlayFS Затронутые версии Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Использование gcc exploit.c -o exploit ./exploit Описание «Специфическая для Ubuntu проблема в файловой системе...
CVE-2015-1328
CVE-2015-1328 प्रूफ ऑफ कॉन्सेप्ट CVE-2015-1328 के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC एक्सप्लॉइट, जो लिनक्स कर्नेल के overlayfs कार्यान्वयन को प्रभावित करने वाली एक विशेषाधिकार वृद्धि भेद्यता है। यह भेद्यता स्थानीय अनप्रिविलेज्ड उपयोगकर्ताओं को उपयोगकर्ता नामस्थानों के भीतर overlayfs माउंट संचालन में...
CVE-2021-3493
CVE-2021-3493 Ubuntu OverlayFS - Élévation de privilèges locale Versions affectées Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Utilisation gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Problème spécifique à Ubuntu dans le système de fichiers...
CVE-2024-1086
CVE-2024-1086 إثبات المفهوم الشامل لرفع الامتيازات المحلية لثغرة CVE-2024-1086، يعمل على معظم نوى لينكس بين v5.14 و v6.6، بما في ذلك دبيان وأوبونتو وKernelCTF. نسبة النجاح 99.4% في صور KernelCTF. https://github.com/Notselwyn/CVE-2024-1086/assets/68616630/a3d43951-94ab-4c09-a14b-07b81f89b3de تدوين...
CVE-2026-23111
مُدقّق CVE-2026-23111 نواة لينكس nftables UAF يحتوي هذا المستودع على سكربت تدقيق آلي مكتوب بلغة Bash مصمم لتقييم الثغرة الأمنية CVE-2026-23111 بعمق ودقة في بيئات لينكس. 🔍 ما هي الثغرة الأمنية CVE-2026-23111؟ CVE-2026-23111 هي ثغرة من نوع Use-After-Free UAF اكتُشفت في النظام الفرعي nftables في نوا...
CVE-2021-3493
CVE-2021-3493 Ubuntu OverlayFS Lokale Rechteausweitung Betroffene Versionen Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Verwendung gcc exploit.c -o exploit chmod +x exploit ./exploit Beschreibung „Ubuntu-spezifisches Problem im OverlayFS-Dateisystem des...
CVE-2026-68335
In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdsfindbound looks up the destination socket using a global rhashtable keyed solely on addr, port, scopeid. Network namespaces are not part of the key, so a send...
CVE-2026-68186
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...
EUVD-2026-55287
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...
CVE-2026-18107
A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...
OESA-2026-3176 buildah security update
The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...
MiracleLinux 8 : kernel-4.18.0-553.143.1.el8_10 (AXSA:2026-1337:51)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1337:51 advisory. - net/sched: ets: Always remove class from active list before deleting in etsqdiscchange CVE-2025-71066 - kernel: stale page table entries in IOMMU...
Linux Distros Unpatched Vulnerability : CVE-2026-63981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Fix blockcast recursion bypass leading to stack overflow tcfmirredact...
PT-2026-61298
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack overflow occurs in the Linux kernel due to a recursion bypass in the tcf mirred act function. The function uses a counter sched mirred nest to limit recursion depth, but when the...
Important: kernel6.12
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path CVE-2026-53362 In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path CVE-2026-53366...
