cve-2018-14634

cve-2018-14634 Dies ist ein Exploit, der für Forscher veröffentlicht wurde und von Qualys, einem cloudbasierten Anbieter von Sicherheits- und Compliance-Lösungen, entdeckt wurde. Betrifft Kernel-Versionen 2.6.x, 3.10.x und 4.14.x Um diese Schwachstelle erfolgreich auszunutzen, müssen Angreifer...

MacDirtyCow

MacDirtyCow Esempio di CVE-2022-46689, noto anche come MacDirtyCow. Cosa? MacDirtyCow è una vulnerabilità di escalation dei privilegi in macOS, simile alla vulnerabilità Dirty COW in Linux. La vulnerabilità risiede nel meccanismo copy-on-write COW utilizzato dal kernel XNU di macOS. La...

CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit Questo repository contiene l'exploit per la vulnerabilità da me recentemente scoperta nel sottosistema nftables, a cui è stato assegnato il CVE-2023-0179, che affligge tutte le versioni di Linux dalla 5.5 alla 6.2-rc3, sebbene l'exploit sia stato testato sulla 6.1.6. ...

Dirty-Pipe-Exploits

CVE-2022-0847 Exploits Dirty Pipe Che cos'è? Divulgata il 7 marzo 2022 da Max Kellerman2, la CVE-2022-0847 è una vulnerabilità nel kernel Linux versioni tra la 5.8 e la 5.16.11 che consente agli attaccanti di sostituire file di sola lettura o immutabili e aumentare i propri privilegi sul sistema...

CVE-2024-0582

Introdução Este exploit implementa um método de ataque Dirty Cred para obter acesso de escrita não autorizado ao /etc/passwd. Ao contrário de muitos exploits semelhantes que criam inúmeras páginas ou pulverizam agressivamente descritores de arquivos, esta abordagem segue um caminho mais direciona...

cve-2026-31431-checker

CVE-2026-31431 "Copy Fail" — Script de Detecção de Vulnerabilidade Scanner baseado em shell para CVE-2026-31431 "Copy Fail" , uma vulnerabilidade de escalonamento local de privilégios no subsistema criptográfico do kernel Linux algifaead / interface AFALG. Um usuário local sem privilégios pode...

CVE-2017-7184

CVE-2017-7184 – Escalation dei privilegi nel kernel Linux XFRM senza sudo Panoramica Questo repository contiene un exploit proof-of-concept di escalation locale dei privilegi per CVE-2017-7184 , una vulnerabilità del kernel Linux nel sottosistema netlink XFRM IPsec. L'exploit dimostra come un...

CVE-2022-0847-DirtyPipe

title: Analisi della vulnerabilità CVE-2022-0847 DirtyPipe privilegio locale date: 2022-03-08 14:41:20 tags: - Elevazione di privilegi Linux categories: - Ricerca sulla sicurezza Descrizione della vulnerabilità ​ CVE-2022-0847 è una vulnerabilità nel kernel Linux dalla versione 5.8 in poi. Un...

Windows-2

Windows-2 BlueKeep Vulnerable Lab - CVE-2019-0708 1. Panoramica Questo repository contiene un lab Windows deliberatamente vulnerabile, progettato per dimostrare la vulnerabilità BlueKeep che interessa il servizio Remote Desktop Protocol RDP. BlueKeep è una vulnerabilità critica di Remote Code...

kernel-exploit-dirtycow

Kernel Exploit — Dirty Cow CVE-2016-5195 Laboratório de escalonamento de privilégios através da vulnerabilidade Dirty Cow, realizado como parte da especialização em cibersegurança da 4Geeks Academy. Descrição Dirty Cow é uma condição de corrida no subsistema de memória do kernel do Linux...

CVE-2026-80722

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

CVE-2026-80724

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclockmiscdevmmap rejects writable mappings of the shared vmclock ABI page with -EROFS, but leaves VMMAYWRITE set. Userspace can map the page read-only and then...

CVE-2026-80723

In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...

CVE-2026-80717

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80719

In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker batches per-generation size deltas in walk-nrpages while walking page tables without holding the lruvec lock. The resetbatchsize later folds...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80720

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bioset for iomapsplitioend iomapsplitioend can split bios that already come from iomapioendbioset and thus deadlock when the bioset is exhausted. Add a separate bioset to avoid this deadlock. Christian Braun...

CVE-2026-80718

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits pcpuunitpages, but pcpuchunkpopulated uses it to set chunk-populated, whose...

CVE-2026-80721

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

CVE-2026-80716

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink sndpcmdrain on a linked stream parks an on-stack wait entry on the drained peer's runtime-sleep, and after scheduletimeout removes it only if that peer is still found in the caller's...