Exploits from Github
770 subscribers
1 photo
1.49K files
4.49K links
Download Telegram
CVE-2024-48990.zip
3.3 KB
CVE-2024-48990
Author: tahsinunluturk

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.

GitHub Link:
https://github.com/tahsinunluturk/needrestart-privesc-cve-2024-48990