Alexandria Library

A curated collection of awesome articles

Here are some ressources related to Linux_kernel, Vulnerability, Cve. Hoping you will find learning material, alternative tools or just some interesting stuff.

Home > Linux, Virtualization, Security, Co... > Cybersecurity, Malware, Encryption,... > Security, Vulnerability, CVE, OpenS... > Linux_kernel, Vulnerability, Cve

Articles

Linux Kernel Ksmbd Use-After-Free Remote Code Execution Vulnerability

See discussion (104 comments, 147 points) - Archive

Beacown (Linux WiFi Exploit)

See discussion (23 comments, 94 points) - Archive

The quantum state of Linux kernel garbage collection

See discussion (34 comments, 116 points) - Archive

A Crack in the Linux Firewall

See discussion (64 comments, 264 points) - Archive

Playstation confirms chain of 5 vulnerabilities on PS4/PS5

See discussion (160 comments, 288 points) - Archive

Exploiting a heap overflow in the FreeBSD wi-fi stack

See discussion (27 comments, 137 points) - Archive

See discussion (74 comments, 94 points) - Archive

Linux: Vulnerabilities in nf_tables cause privilege escalation, information leak

See discussion (217 comments, 294 points) - Archive

The Discovery and Exploitation of CVE-2022-25636

See discussion (3 comments, 100 points) - Archive

The Dirty Pipe Vulnerability

See discussion (240 comments, 697 points) - Archive

Heap memory corruption in GitHub's Markdown table parsing extension

See discussion (42 comments, 83 points) - Archive

CVE-2022-0435: A Remote Stack Overflow in the Linux Kernel

See discussion (34 comments, 115 points) - Archive

Pwnkit: Local Privilege Escalation in polkit's pkexec

See discussion (41 comments, 181 points) - Archive

Pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

See discussion (166 comments, 268 points) - Archive

Cache Poisoning at Scale

See discussion (5 comments, 151 points) - Archive

CVE-2021-22555: Turning \x00\x00 into 10000$

See discussion (71 comments, 344 points) - Archive

Linux kernel incorrect computation of branch displacements in BPF JIT compiler

See discussion (19 comments, 111 points) - Archive

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution

See discussion (103 comments, 328 points) - Archive

How to backdoor curl

See discussion (22 comments, 90 points) - Archive

SerenityOS: Writing a Full Chain Exploit

See discussion (9 comments, 86 points) - Archive

Red Hat reports security issue in Linux Kernel which was fixed 17 months prior

See discussion (74 comments, 92 points) - Archive

Huawei HKSP Introduces Trivially Exploitable Vulnerability in the Linux Kernel

See discussion (22 comments, 102 points) - Archive

Remotely dump memory with no interaction on iPhone 11 Pro (fixed in iOS 13.3.1)

See discussion (16 comments, 100 points) - Archive

Bad Binder: Android In-the-Wild Exploit

See discussion (52 comments, 139 points) - Archive

How a double-free bug in WhatsApp turns to remote code execution

See discussion (120 comments, 416 points) - Archive

Linux and FreeBSD: Multiple TCP-based remote denial of service vulnerabilities

See discussion (8 comments, 83 points) - Archive

SACK Panic – Multiple TCP-based remote denial-of-service issues

See discussion (131 comments, 416 points) - Archive

System Down: A systemd-journald exploit

See discussion (344 comments, 385 points) - Archive

OpenSSH user enumeration

See discussion (87 comments, 94 points) - Archive

Zip Slip Vulnerability

See discussion (35 comments, 94 points) - Archive

See discussion (77 comments, 89 points) - Archive

Linux kernel: multiple vulnerabilities in the USB subsystem

See discussion (69 comments, 180 points) - Archive

Behind the Masq: Yet More DNS and DHCP Vulnerabilities

See discussion (117 comments, 221 points) - Archive

Exploiting the Linux kernel via packet sockets

See discussion (38 comments, 197 points) - Archive

Udp.c in Linux kernel pre-4.5 allows remote attackers to execute arbitrary code

See discussion (65 comments, 233 points) - Archive

OpenBSD MitM attack against WPA1/WPA2

See discussion (20 comments, 90 points) - Archive

Linux kernel: CVE-2017-6074: DCCP double-free vulnerability (local root)

See discussion (94 comments, 182 points) - Archive

Linux panic on fragemented IPv6 traffic (icmp6_send)

See discussion (25 comments, 146 points) - Archive

“Most serious” Linux privilege-escalation bug ever is under active exploit

See discussion (209 comments, 483 points) - Archive

Writing my first shellcode

See discussion (20 comments, 94 points) - Archive

“This version of XScreenSaver is very old. Please upgrade”

See discussion (99 comments, 84 points) - Archive

The Discovery of Apache ZooKeeper’s Poison Packet

See discussion (59 comments, 261 points) - Archive

PixieFail: Nine Vulnerabilities UEFI Implementations

See discussion (98 comments, 152 points) - Archive

CVE-2023-6246: Heap-based buffer overflow in the glibc's syslog()

See discussion (18 comments, 91 points) - Archive

New Linux glibc flaw lets attackers get root on major distros

See discussion (99 comments, 166 points) - Archive

Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques

See discussion (120 comments, 406 points) - Archive

Backdoor in upstream xz/liblzma leading to SSH server compromise

See discussion (1849 comments, 4549 points) - Archive

Everything I Know About the XZ Backdoor

See discussion (31 comments, 195 points) - Archive

FAQ on the xz-utils backdoor

See discussion (30 comments, 141 points) - Archive

Debian on xz-utils: revert to version that does not contain changes by bad actor

See discussion (149 comments, 148 points) - Archive

Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library

See discussion (21 comments, 119 points) - Archive

XZ Utils Backdoor

See discussion (16 comments, 114 points) - Archive

XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."

See discussion (811 comments, 1323 points) - Archive

Xz/liblzma: Bash-stage Obfuscation Explained

See discussion (128 comments, 535 points) - Archive

How the XZ Backdoor Works

See discussion (79 comments, 200 points) - Archive

Reflections on Distrusting xz

See discussion (325 comments, 286 points) - Archive

Inside the failed attempt to backdoor SSH globally that got caught by chance

See discussion (191 comments, 221 points) - Archive

What we know about the xz Utils backdoor that almost infected the world

See discussion (323 comments, 307 points) - Archive

Xzbot: Notes, honeypot, and exploit demo for the xz backdoor

See discussion (469 comments, 849 points) - Archive

Timeline of the xz open source attack

See discussion (461 comments, 1069 points) - Archive

The xz attack shell script

See discussion (313 comments, 606 points) - Archive

A podcast about the xz backdoor with the guy who found it

See discussion (33 comments, 134 points) - Archive

I discovered a critical exploit in ZeroMQ with mostly pure luck

See discussion (61 comments, 204 points) - Archive

See discussion (31 comments, 146 points) - Archive

XZ backdoor story – Initial analysis

See discussion (250 comments, 406 points) - Archive

Xz sshd backdoor collecting usernames from logs

See discussion (10 comments, 143 points) - Archive

Social engineering takeovers of open source projects

See discussion (361 comments, 822 points) - Archive

How to destroy your OS with tar

See discussion (61 comments, 98 points) - Archive

A buffer overflow in the XNU kernel

See discussion (35 comments, 146 points) - Archive

Jia Tan "JiaT75": Added error text to warning when untaring with bsdtar (2021)

See discussion (98 comments, 160 points) - Archive

OpenSSH Backdoors

See discussion (129 comments, 257 points) - Archive