copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Verified on ubuntu 18.04,ubuntu 20.04,ubuntu 22.04,kali 2024,kali 2025,kali 2026 root@kitploit: gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Verified on ubuntu 25.04 arm64 root@kitploit: gcc -o exploit exploitaarch64.c -lz && chmod +x exploit && ./explo...

DEBIAN-CVE-2026-96746

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

CVE-2026-96746

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

CVE-2021-4034

Run the following commands on a vulnerable Linux machine in the directory where the c file is present and it should give you root access. $ gcc CVE-2021-4034.c -o exploit $ ./exploit whoami root...

copy-fail-CVE-2026-31431

Usage Compile statically to be able to use in any Linux environment with no need of Python or aditional libraries. root@kitploit: gcc -o exploit exploit.c -lz -static ./exploit Or run the python script root@kitploit: python3 exploit.py...

CVE-2026-97499

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

CVE-2026-93785

In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length The cifs.idmap key type stores its payload length in key-datalen, which is limited to U16MAX. Accepting a larger key payload truncates the recorded length and can make later users interpret...

CVE-2026-93263

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

CVE-2026-96746

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

CVE-2026-96746

The MongoDB C Driver contains an out-of-bounds write vulnerability within its connection-monitoring logic . Specifically, a heap buffer overflow can occur due to mid-scan command list growth during client topology monitoring. This flaw may allow an unauthenticated party —who controls name resolut...

Heap buffer overflow via mid-scan command list growth in client topology monitoring

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

CVE-2026-96746 Heap buffer overflow via mid-scan command list growth in client topology monitoring

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

EUVD-2026-86263

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

CVE-2026-96746 Heap buffer overflow via mid-scan command list growth in client topology monitoring

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

CVE-2021-4034

CVE-2021-4034 root@kitploit: sudo apt install golang-go sudo apt install gccgo-go root@kitploit: grep PRETTY /etc/os-release id gcc cve-2021-4034-poc.c -o cve-2021-4034-poc ./cve-2021-4034-poc...

Weggli_rules_SSTIC2023

Here is a curated list of weggli queries You can read them and use them one by one, or launch them by batch: Usage: root@kitploit: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ There is threee categories: 1. dangerous functions: such as strcpy, system, etc.. 2...

code-shield

protocol-remediator Es un MVP que normaliza los hallazgos de vulnerabilidades en código C/C++ de protocolos y plataformas como evidencia reproducible, y valida parches candidatos en una copia aislada. code-shield era un nombre de trabajo con riesgo de colisión, por lo que se usó un nombre interno...

CVE-2026-20169

IoT-FND Overview Features Network Discovery The scanner checks a defined IP range and looks for devices exposing the expected management service. Example checks: IP range enumeration TCP port availability testing Service discovery Basic connection validation Windows Native Implementation Built...

0net

0net: Simple Windows Remote Control Backdoor Introduction: 0net is a simple Windows remote control backdoor program. The client is written in C++ and compiled with VC++6.0. The server is written in Python and is cross-platform. The project is currently under development... Project details:...

DirtyCow

DirtyCow - Exploit Below code takes advantage of a known vulnerability Dirty COW CVE-2016-5195 to escalate privileges and get root access. Before running, uncomment sc for your platform within main.c. Compilation: gcc main.c -o dirtycow -lpthread...