Эксплуатация

abraxas/vsftpd-cmds-denied-alias

vsftpd 3.0.5 - High - Remote - Privilege leftover - cmds_denied misses RFC aliases (XRMD)

abraxas/vbox-lsilogic-sas-config

VirtualBox 7.2.20 - Critical - Local - Type confusion / arb R/W - SAS1068 CONFIG SCSI-SPI overlay

abraxas/vbox-vmdk-sparse-extent

Oracle VM VirtualBox 7.2.20 - High - Local - File read - VMDK sparse FLAT extent path join

abraxas/vbox-ovf-nat-tftp-prefix

VirtualBox 7.2.20 - High - Local - File read - OVF NAT TFTP empty prefix

abraxas/vbox-ovf-href-dest-escape

VirtualBox 7.2.20 - High - Local - File write - OVF href dest escape

abraxas/vbox-hgcm-ssm-cparms

VirtualBox 7.2.20 - High - Local - Heap overflow - HGCM SSM cParms wrap

abraxas/vbox-guestctrl-copyfrom-dotdot

VirtualBox 7.2.20 - High - Local - File write - Guest Control copy-from DOTDOT

abraxas/vaultwarden-ip-header-spoof

Vaultwarden 1.37.3 default X-Real-IP trusted-local bypasses login rate limits on Docker NAT

abraxas/tomcat-rewrite-ns-loop

Apache Tomcat 11.0.27 - High - Remote - DoS - RewriteValve [NS] worker pin

abraxas/sqlite-xfer-auth

SQLite 3.53.4 - High - Local - Privilege leftover - INSERT SELECT xfer skips source READ

abraxas/sqlite-wal-pagesize

SQLite 3.53.4 - High - Local - Info leak - WAL/DB page-size mismatch uninitialized page tail

abraxas/uptime-kuma-setup-toctou

Proof-of-concept for a TOCTOU race in Uptime Kuma's first-run Socket.IO setup, letting an unauthenticated attacker plant a hidden second admin and…

abraxas/sqlite-rtree-rowid0

SQLite 3.53.4 - High - Local - UAF - rtree last_insert_rowid 0 node hash

abraxas/sqlite-session-ncol

SQLite 3.53.4 - High - Local - heap OOB write - session changeset same-name nCol growth

abraxas/sqlite-values-union

SQLite 3.53.4 - High - Local - Crash - VALUES UNION ALL fallback cleanup stack overflow

abraxas/sqlite-rsync-ssh

SQLite 3.53.4 sqlite3_rsync - High - Remote - RCE - SSH filename command injection