cifswitch

CIFSwitch — Sitio de seguimiento de LPE por origen de clave cifs.spnego de CIFS Fuente del rastreador de estado de parches CIFSwitch : un sitio de una sola página que registra qué distribuciones han publicado una corrección para la escalada de privilegios por origen de clave cifs.spnego de CIFS e...

cve-2016-0040

cve-2016-0040 此poc针对由Meysam Firozi @R00tkitSmm发现并利用的cve-2016-0040漏洞 该poc有助于在Windows内核中将任意数据写入任意地址 更多信息请参见我的博客： http://ioctl.ir/index.php/2016/02/13/cve-2016-0040-story-of-uninitialized-pointer/...

cve-2026-43499

Resumen del fallo de explotación de GhostLock en PD2229 SM8475, 5.10.233 GKI 1. Hechos sobre la vulnerabilidad y el dispositivo 1.1 Información básica de CVE-2026-43499 GhostLock Elemento| Valor ---|--- Tipo de vulnerabilidad| Use-After-Free en la pila en la ruta rtmutex / futex PI Versión...

CVE-2021-22555-Exploit

CVE-2021-22555-Exploit CVE-2021-22555 Exploit Por Andy Nguyen INFORMACIÓN Se descubrió una escritura fuera de los límites del heap que afecta a Linux desde v2.6.19-rc1 en net/netfilter/xtables.c. Esto permite a un atacante obtener privilegios o provocar una denegación de servicio DoS mediante...

CVE-2013-6282

COMPILACIÓ: Descarga el android ndk, p. ej.: https://dl.google.com/android/repository/android-ndk-r10e-linux-x8664.zip Usé android-ndk-10d Descomprímelo y asegúrate de que ndk-build esté en tu PATH root@kitploit: $ make root ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk...

CVE-2009-2698

CVE-2009-2698 CVE-2009-2698 compiled for CentOS 4.8 https://github.com/SecWiki/linux-kernel-exploits/tree/4dca098e7491efc83903494d7c00f24c843aae99/2009/CVE-2009-2698 Detail root@kitploit: hacker@localhost $ id uid=500hacker gid=500hacker groups=500hacker context=useru:systemr:unconfinedt...

CVE-2021-42008

CVE-2021-42008 CVE-2021-42008: 利用 Linux 6pack 驱动中一个 16 年之久的漏洞 漏洞分析与利用开发: https://syst3mfailure.io/sixpack-slab-out-of-bounds 本漏洞利用设计用于: root@kitploit: Debian 11 - Kernel 5.10.0-8-amd64...

CVE-2026-38763

CVE-2026-38763 Unistal Systems Pvt. Ltd. 的 Protegent 360 v2.0.0.4 中存在一个问题，允许本地攻击者在内核中引发拒绝服务。...

CVE-2026-40369

🚨 CVE-2026-40369 - Vulnerabilidad de Elevación de Privilegios del Kernel de Windows Desbordamiento de búfer basado en montón del Kernel de Windows que permite a atacantes locales elevar privilegios aNT AUTHORITY\SYSTEM. 📖 Resumen CVE-2026-40369 es una vulnerabilidad de escalada de privilegios de...

CTF-CVE-2022-0847

Despliegue de Dirty Pipe Para este desafío, quieres sobrescribir el archivo de solo lectura "cat.txt" usando el exploit CVE-2022-0847 Hay muchas formas de hacerlo usando el exploit Dependencias Kernel de Linux versión 5.8 o posterior vulnerable gcc GNU Compiler Collection para compilar el código...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits 一套适用于渗透测试人员和红队的利用工具及文档，用于辅助利用 Linux 脏管（Dirty Pipe）漏洞。 关于漏洞 脏管（CVE-2022-0847）是 Linux 内核中的一个本地权限提升漏洞，可能允许非特权用户执行以下操作： 修改/覆盖任意只读文件，例如 /etc/passwd。 获取提升权限的 shell。 受影响版本 5.8 及更新版本的 Linux 内核均受影响。 截至目前，以下 Linux 内核版本已修补该漏洞： 5.16.11 5.15.25 5.10.102...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Descripción Esta demostración tuvo lugar en HITCON 2023 en Taiwán. La demo destaca la explotación de AMDCpuProfiler.sys dentro de AMD μProf. Al provocar una escritura arbitraria en el token de EPROCESS, se consigue una escalada de privilegios a nivel de SYSTEM...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local privilege escalation exploiting CVE-2026-43499 — an rtmutex removewaiter bug that leaves a struct rtmutexwaiter dangling on the waiter's kernel stack kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapted from NebuSec/CyberMeowfia...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: usb: xhci: A memory leak was fixed in xhcidisableSlot. xhcialloccommand allocates a command structure. When the second argument is true, it also allocates a completion structure. Currently, the error handling code in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb – fix an invalid memory access If the croseckeybregistermatrix function is not called due to “buttonsswitchesonly” in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: The risk of out-of-memory access has been prevented. The dvbdev module contains a static variable used to store dvb minors. Its behavior depends on whether CONFIGDVBDYNAMICMINORS is set or not. When it is not set,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mmc: atmel-mci: fixed the return value check in mmcaddhost The mmcaddhost function may return an error. If we ignore its return value, it will cause two issues: 1. The memory allocated in mmcallochost may be leaked. 2. In the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: MediTech; vcodec: Fixed the VP8 stateless decoder’s “smatch” warning. A “smatch” static checker warning was also fixed in vdecvp8reqif.c. This issue causes the kernel to crash when fb is set to NULL...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fixed the issue of information leakage due to DMAFROMDEVICE. The problem I’m addressing was discovered during the LTP test covering cve-2018-1000204. A brief description of what happens is as follows: 1 The test case sen...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/meson: fixed a memory leak in the -hpdnotify callback. The EDID returned by drmbridgegetedid needs to be freed...