ffs

FFS - S Sistema de Archivos Esta es una herramienta CLI para buscar archivos como grep que no usa el kernel del sistema operativo para leer archivos, sino que lee tus discos directamente. Es prácticamente inútil, pero increíblemente genial. esto es solo 1.5k líneas de código C que: requiere sudo...

turbolite

turbolite turbolite es un VFS de SQLite en Rust que sirve búsquedas puntuales y uniones directamente desde S3 con una latencia en frío inferior a 250 ms. Este repositorio es un espacio de trabajo de Cargo con dos crates: turbolite — Biblioteca pura de Rust. VFS de SQLite con compresión a nivel de...

CVE-2022-3910

CVE-2022-3910 poc dirtyfile dirtymm...

CVE-2024-4040

CVE-2024-4040 CrushFTP 所有版本在 10.7.1 和 11.1.0 之前（所有平台）中存在一个服务器端模板注入漏洞，允许未经身份验证的远程攻击者读取 VFS 沙箱之外的文件系统文件，绕过身份验证获取管理员权限，并在服务器上执行远程代码。 安装 git clone https://github.com/gotr00t0day/CVE-2024-4040.git cd CVE-2024-4040 pip3 install -r requirements.txt 使用方法 root@kitploit: usage: CVE-2024-4040.py -h -t TARGE...

CrushFTP VFS - Sandbox Escape LFR

VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows remote attackers with low privileges to read files from the filesystem outside of VFS Sandbox. id: CVE-2024-4040 info: name: CrushFTP VFS - Sandbox Escape LFR author: DhiyaneshDK,pussycat0x severity:...

CVE-2024-4040

CVE-2024-4040 - escáneres de exploit Este repositorio contiene archivos relacionados con CVE-2024-4040 escape de VFS de CrushFTP. scanhost.py Este script intenta usar la vulnerabilidad para leer archivos fuera del sandbox. Si tiene éxito, el script escribe Vulnerable en la salida estándar y retor...

CVE-2024-4040

CVE-2024-4040 Una vulnerabilidad de inyección de plantillas del lado del servidor en CrushFTP en todas las versiones anteriores a 10.7.1 y 11.1.0 en todas las plataformas permite a atacantes remotos no autenticados leer archivos del sistema de archivos fuera del VFS Sandbox, eludir la autenticaci...

CrushFTP10-Docker-CVE-2024-4040

Despliegue de Docker de CrushFTP 10.0 vulnerable a CVE-2024-4040 Este repositorio proporciona un Dockerfile para construir una imagen Docker y desplegar un contenedor Linux con un servidor CrushFTP que es vulnerable a la Vulnerabilidad de Escape del Sandbox VFS de CrushFTP CVE-2024-4040. ⚠️ Aviso...

GHSA-C476-6W5Q-JW77 rclone: FTP cross-session auth-proxy backend confusion

Summary The FTP auth-proxy driver stores one obscured password per username in a server-wide map. It does not bind the credential or returned VFS to the authenticated FTP session. If two accepted credentials use the same username but resolve to different proxy backends, the later login overwrites...

CVE-2026-65349

CVE-2026-65349 — getattrlist OOB Write in vfsattrpackinternal Component: XNU VFS — vfsattrpackinternal getattrlist syscall Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds write to caller buffer Impact: Kernel heap corruption; from kernel conte...

kernel: Revert "net/smc: Introduce TCP ULP support"

A flaw was found in the Linux kernel's TCP User-Level Protocol ULP support for SMC. This vulnerability arises when an active TCP socket is converted into an SMC socket, as the implementation attempts to modify core Virtual File System VFS structures in-place. This action violates fundamental VFS...

PT-2026-89689

Summary The FTP auth-proxy driver stores one obscured password per username in a server-wide map. It does not bind the credential or returned VFS to the authenticated FTP session. If two accepted credentials use the same username but resolve to different proxy backends, the later login overwrites...

CVE-2024-4040

CVE-2024-4040 Una vulnerabilidad de inyección de plantillas del lado del servidor en CrushFTP en todas las versiones anteriores a 10.7.1 y 11.1.0 en todas las plataformas permite a atacantes remotos no autenticados leer archivos del sistema de archivos fuera del Sandbox VFS, eludir la autenticaci...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba, specifically in the vfsstreamsxattr module. In this module, uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content, which may include sensitive data, resulting in an information...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vfs: fixed a race condition between eviceinodes and findinode&iput Hi, everyone, I recently noticed a bug in btrfs. After investigating it further, I believe it’s a race condition in vfs. Let’s assume that there’s an inode i.e.,...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: can: bcm: bcmtxsetup: fixed KMSAN uninit-value in vfswrite Syzkaller reported the following issues: ===================================================== BUG: KMSAN: uninit-value in aiorwdone fs/aio.c:1520 inline BUG: KMSAN:...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: epoll: Be more careful regarding the lifetime of files. epoll may call vfspoll with a file pointer that may race with the last fput. This would cause fcount to decrease to zero. While the ep-mtx locking ensures that the...

Astra Linux – Vulnerability in Samba

The Samba vfsfruit module utilizes extended file attributes EA, xattr to enhance compatibility with Apple SMB clients and interoperability with Netatalk 3 AFP file servers. Samba versions prior to 4.13.17, 4.14.12, and 4.15.5, when vfsfruit was configured, allowed out-of-bounds heap read and writ...

Astra Linux – Vulnerability in Qemu

A issue was discovered in QEMU versions 7.1.0 through 8.2.1. The registervfs function in hw/pci/pciesriov.c mishandles the situation where a guest writes a number of NumVFs that is greater than the total number of TotalVFs, resulting in a buffer overflow in VF implementations...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: 9p: Fixed the fid refcount leak in v9fsvfsgetlink. We now check for protocol versions that are later than required, after a fid has been obtained. Simply move the version check to an earlier stage...