CVE-2024-3094-check

CVE-2024-3094 脆弱性チェックツール この脆弱性により、攻撃者はSSH認証を通過せずにサーバーにログインし、任意のコードを実行できます。詳細は以下を参照してください: https://www.openwall.com/lists/oss-security/2024/03/29/4 使用 root@kitploit: curl -fsSL https://raw.githubusercontent.com/wgetnz/CVE-2024-3094-check/main/CVE-2024-3094-check.sh| bash または root@kitploit: curl...

xz-backdoor-CVE-2024-3094-Check

xz-backdoor-CVE-2024-3094-Check インストールされている xz-utils のバージョンが CVE-2024-3094 のバックドアに対して脆弱かどうかを確認します。このチェックは Kali Linux やその他の Debian ベースのインストール向けです。 使い方 root@kitploit: git https://github.com/Bella-Bc/xz-backdoor-CVE-2024-3094-Check.git cd xz-backdoor-CVE-2024-3094-Check chmod +x...

CVE-2024-3094-checker

CVE-2024-3094 チェッカー xz Utils バージョン 5.6.0 および 5.6.1 は侵害されているようです。 XZ Utils はデータ圧縮ソフトウェアであり、Linux ディストリビューションに含まれている可能性があります。悪意のあるコードにより、影響を受けるシステムへの不正アクセスが可能になる可能性があります。 ソース: https://vulners.com/cve/CVE-2024-3094 https://access.redhat.com/security/cve/CVE-2024-3094...

threat-intel-cve-2024-3094

脅威インテリジェンスレポート: CVE-2024-3094 – XZ Utils バックドア このリポジトリには、2024年にxz-utils圧縮ツールで発見された注目すべきバックドア脆弱性CVE-2024-3094 を分析した脅威インテリジェンスレポートが含まれています。 CVE-2024-3094は、xz圧縮ライブラリに悪意のあるバックドアが挿入された深刻なサプライチェーン侵害であり、特定のバージョン（5.6.0および5.6.1）に影響を与えます。このバックドアにより、systemdを介したSSH認証でリモートコード実行が可能となり、Linuxシステムに重大なリスクをもたらしました。...

CVE-2026-41567

CVE-2026-41567 1day Docker 逃逸漏洞 CVE-2026-41567 的 1day。 这是一个使用特洛伊木马化的 xz / unpigz 进行 Docker 逃逸的演示。 它可以很容易地修改为远程使用（例如，只需将 Docker 默认 IP 修改为远程 C2 即可）。 有关该漏洞利用的更多信息，请参见此处 PoC 在主机上运行 netcat 监听端口 50005 root@kitploit: ubuntu@ubuntu-noble:/CVE-2026-41567$ nc -vlp 50005 Listening on 0.0.0.0 50005 Connectio...

cs50-cybersecurity-final-project

Technical Analysis of CVE-2024-3094: XZ Utils Supply Chain Backdoor Video Demo: https://youtu.be/3xBtabSkusE?si=ChN3nBgybK4nqNLz Description: An in-depth technical and architectural breakdown of CVE-2024-3094 CVSS 10.0 Critical, the historic open-source supply chain backdoor embedded into xz-util...

xz security update

An update is available for xz. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list XZ Utils is an integrated collection of user-space file compression utilities bas...

Moderate: Red Hat Security Advisory: xz security update

An update for xz is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

xz: XZ Utils: Denial of Service via buffer overflow in index decoding

A flaw was found in XZ Utils. When the lzmaindexdecoder function processes an empty index, and a subsequent lzmaindexappend operation is performed, insufficient memory is allocated. This can lead to a buffer overflow, potentially causing a denial of service DoS for affected systems...

ROOT-OS-DEBIAN-12-CVE-2026-34743 CVE-2026-34743 in xz-utils - Patched by Root

Root has patched CVE-2026-34743 in the xz-utils package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in p7zip

7-Zip 22.01 does not report an error for certain invalid xz files that involve block flags and reserved bits. Some later versions are unaffected...

ROOT-OS-DEBIAN-11-CVE-2026-34743 CVE-2026-34743 in xz-utils - Patched by Root

Root has patched CVE-2026-34743 in the xz-utils package for Root:Debian:11. Multiple fixed versions available...

Exploit for CVE-2026-41567

CVE-2026-41567 1day One day for Docker Escape CVE-2026-41567...

Malicious code in date-fmt-helper-xz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b384650ec0fabdd01a7dfc513cccd25156611a04c17ba0c435b950ddb9215777 date-fmt-helper-xz ships a postinstall.js that runs automatically on npm install. The script opens a TCP connection to the hardcoded remote host...

Photon OS 5.0: Xz PHSA-2025-5.0-91-0496

An update of the xz package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0496. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

[SECURITY] [DLA 4718-1] 7zip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4718-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 05, 2026 https://wiki.debian.org/LTS -...

SUSE CVE-2026-14266

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-14266

A flaw was found in 7-Zip. This vulnerability allows a remote attacker to execute arbitrary code on affected installations. Exploitation requires user interaction, such as opening a specially crafted malicious file or visiting a malicious web page. The flaw occurs during the processing of...

CVE-2026-14266

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

EUVD-2026-50420

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...