分类 Linux/Unix 下的文章
OrientDB <=2.22 代码执行
关于OrientDBOrientDB是一个分布式图形数据库引擎，具有文档数据库的灵活性，一体化的产品。第一个也是最好的可升级，高性能，可操作的NoSQL数据库。Vulnerability DetailsOrientDB uses RBAC model for authentication schemes. By default an OrientDB has 3 roles – admin,...
Linux Kernel 4.4.0 (Ubuntu) - DCCP Double-Free Privilege Escalation
// // EDB Note: More information ~ http://seclists.org/oss-sec/2017/q1/471 // // A proof-of-concept local root exploit for CVE-2017-6074. // Includes a semireliable SMAP/SMEP bypass. // Tested on 4...
ntfs-3g - Unsanitized modprobe Environment Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1072 ntfs-3g is installed by default e.g. on Ubuntu and comes with a setuid root program /bin/ntfs-3g. When this program is invoked...
PHPMailer 5.2.17 - Remote Code Execution
坦白的说，看到限制条件就觉得不爱了，搞得上班还迟到.就是没有注意看条件.要是直接docker运行多好。 Before this commit in class.phpmailer.php in a certain scenarion there is no filter in the sender's email address special chars. This flaw can le...
OpenSSH < 7.4 - agent 漏洞利用代码细节
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1009 The OpenSSH agent permits its clients to load PKCS11 providers using the commands SSH_AGENTC_ADD_SMARTCARD_KEY and SSH_AGEN...
McAfee Virus Scan Enterprise for Linux - Remote Code Execution
from https://www.exploit-db.com/exploits/40911/''' Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Re...