Tag: vulnerability

  • netsec/ Nginx (Debian) – Root PrivEsc [CVE-2016-1247]

    netsec/ Nginx (Debian) – Root PrivEsc [CVE-2016-1247]

    Video PoC Exploit for Nginx packaging on Debian-based distros The video below demonstrates how an attacker using the CVE-2016-1247 vulnerability in Nginx packaging on Debian-based systems (such as Debian, Ubuntu etc.), could escalate their privileges to root user upon gaining access to the system as www-data user. In the presented scenario, the attacker gains the…