Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation
# Exploit Title: Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation
linux_x86-64
linux_x86-64 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Linux Kernel 2.6.x / 3.10.x / 4.14.x (RedHat / Debian / CentOS) (x64) – ‘Mutagen Astronomy’ Local Privilege Escalation
EDB-Note: Systems with less than 32GB of RAM are unlikely to be affected by this issue, due to memory demands during ...
Linux Kernel < 3.16.39 (Debian 8 x64) - 'inotfiy' Local Privilege Escalation
//Trigger inotify event by file open and rename to trigger the vulnerability and exploit
Linux Kernel < 4.4.0-21 (Ubuntu 16.04 x64) - 'netfilter target_offset' Local Privilege Escalation
EDB Note: Download ~ https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44300.zip
Linux Kernel 4.4.0-21 (Ubuntu 16.04 x64) – Netfilter ‘target_offset’ Out-of-Bounds Privilege Escalation
Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40053.zip
Linux Kernel < 3.5.0-23 (Ubuntu 12.04.2 x64) - 'SOCK_DIAG' SMEP Bypass Local Privilege Escalation
EDB Note: Video ~ https://youtu.be/jHJd-5NvWlQ
Adobe Flash – Heap Buffer Overflow Loading ‘.FLV’ File with Nellymoser Audio Codec
Source: https://code.google.com/p/google-security-research/issues/detail?id=425&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash (Linux x64) – Bad Dereference at 0x23c
Source: https://code.google.com/p/google-security-research/issues/detail?id=398&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – XMLSocket Destructor Not Cleared Before Setting User Data in connect
Source: https://code.google.com/p/google-security-research/issues/detail?id=416&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – Heap Buffer Overflow Due to Indexing Error When Loading FLV File
Source: https://code.google.com/p/google-security-research/issues/detail?id=426&can=1&q=label%3AProduct-Flash%20modif...
Linux Kernel – ‘espfix64’ Nested NMIs Interrupting Privilege Escalation
> +++++ CVE-2015-3290 +++++
Rowhammer – NaCl Sandbox Escape
Sources:
Linux Kernel 3.17.5 – IRET Instruction #SS Fault Handling Crash (PoC)
// Only works on x86_64 platform
Offset2lib – Bypassing Full ASLR On 64 bit Linux
-----BEGIN PGP SIGNED MESSAGE-----
OpenSSH < 6.6 SFTP (x64) - Command Execution
#define _GNU_SOURCE
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)
recvmmsg.c - linux 3.4+ local root (CONFIG_X86_X32=y)
Oracle VM VirtualBox 4.1 – Local Denial of Service
source: https://www.securityfocus.com/bid/55471/info
Linux Kernel 2.6.27 < 2.6.36 (RedHat x86-64) - 'compat' Local Privilege Escalation
Ac1dB1tch3z Vs Linux Kernel x86_64 0day
Linux Kernel 2.6.x (x64) – Personality Handling Local Denial of Service
source: https://www.securityfocus.com/bid/38027/info