Exploits from Github
541 subscribers
1 photo
629 files
3.57K links
Download Telegram
CVE-2024-6387

A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog().

Github link:
https://github.com/almogopp/OpenSSH-CVE-2024-6387-Fix
CVE-2022-3699


A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45



that could allow a local user to execute code with elevated privileges.

Github link:
https://github.com/Eap2468/CVE-2022-3699
CVE-2022-27925

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

Github link:
https://github.com/sanan2004/CVE-2022-27925
CVE-2022-37706

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Github link:
https://github.com/sanan2004/CVE-2022-37706
CVE-2018-17431

Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.

Github link:
https://github.com/sanan2004/CVE-2018-17431-Comodo