EchoDrv

EchoDrv Outil permettant d'exploiter la vulnérabilité de lecture/écriture du noyau dans le driver anti-triche ECHOAC echodriver.sys Utilisation Exemple Sponsors Je travaille chez POST Luxembourg et je les remercie de m'avoir accordé du temps pour développer et maintenir ce projet ! Visitez le sit...

LinuxEelvation

Что это Этот проект в основном используется для сбора эксплойтов повышения привилегий на платформе Linux и призван помочь пентестерам быстро добиваться повышения привилегий в реальных условиях. Информация CVE ID| Описание| Ядра ---|---|--- CVE-2004-0077| Ядро Linux| 2.4.20, 2.2.24, 2.4.25, 2.4.26...

CVE-2026-98234

A flaw was found in the Linux kernel's Heavy-Hitter Filter HHF network packet scheduler. A local user with network administration privileges, such as within a container or user namespace, can set an excessively large flow limit due to missing upper-bound validation. When the system subsequently...

CVE-2026-98219

A flaw was found in the Linux kernel's schedext subsystem. A local attacker could exploit a race condition during scheduler initialization to cause a denial of service DoS or potentially escalate privileges. When an error is triggered during the enablement of an extensible scheduler, the kernel...

kfd

Avertissement rapide : je n'ai pas l'intention d'ajouter des offsets pour d'autres appareils et versions d'iOS. kfd kfd, abréviation de kernel file descriptor, est un projet pour lire et écrire la mémoire du noyau sur les appareils Apple. Il exploite diverses vulnérabilités qui peuvent être...

CVE-2026-98227

A flaw was found in the Linux kernel's MemoryStick block driver. The driver fails to release its internal input/output work queue when a card is removed from the system. A local attacker with physical access could exploit this flaw by repeatedly inserting and removing storage cards, gradually...

Ubuntu-0day

Ubuntu16.04-0day Portée de la vulnérabilité : toutes les instances Ubuntu AWS 4.4 sont vulnérables Jann Horn a découvert que, dans certains cas, le Berkeley Packet Filter BPF du noyau Linux exécutait incorrectement l’extension de signe dans checkaluop. Un attaquant local peut l’utiliser pour élev...

RLSA-2026:77500 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

ghostrace

GhostRace : Exploitation et atténuation des conditions de course spéculatives Ce dépôt contient : Un PoC minimaliste illustrant le concept de condition de course spéculative de manière pas à pas et en un seul thread. Des scripts Coccinelle utilisés pour analyser le noyau Linux v5.15.83 à la...

RLSA-2026:77498 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send paths kernel: packet: use consistent...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

TUNderflow

TUNderflow CVE-2026-81000 Writeup !WARNING Le PoC est fourni uniquement pour aider les défenseurs, les mainteneurs et les équipes de sécurité autorisées à valider les correctifs, les atténuations, les détections et l'exposition sur des systèmes qu'ils possèdent ou qu'ils sont explicitement...

CVE-2026-98326

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When an attempt to start a wireless mesh network fails, the channel context is not properly released. A local user could exploit this flaw during network interface removal, leading to driver state inconsistency and a potential...

DEMO-Proof-of-Concept-Temporal-Memory-Inconsistency-in-cldflt.sys-CVE-2025-62221

تحليل تقني وإثبات المفهوم: عدم تناسق الذاكرة الزمني في cldflt.sys CVE-2025-62221 عرض توضيحي إثبات المفهوم: عدم تناسق الذاكرة الزمني في cldflt.sys CVE-2025-62221 CVE-2025-62221: يقدم هذا المستودع تحليلاً تقنياً شاملاً وعرضاً عملياً PoC لمتجه تصعيد امتياز رأسي. تم تحديد الثغرة كبدائية استخدام بعد...

Linux-IPTables-firewall-UltraFirewall

UltraFirewall Pare-feu Linux IPTables + configuration du noyau Comment installer ? git clone https://github.com/invalidrandom/UltraFirewall cd UltraFirewall cat applyconfig.txt Lire les instructions Objectif de l'outil Il s'agit d'un outil purement défensif destiné à protéger votre appareil contr...

CVE-2022-0847

CVE-2022-0847 إعادة إنتاج بسيطة لـ CVE-2022-0847 رابط المقال الأصلي: https://dirtypipe.cm4all.com/ بيئة الإعادة Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux التبعيات gcc خطوات الاستخدام git clone https://github.com/imfiver/CVE-2022-0847.git cd CVE-2022-0847...

CVE-2017-8890

CVE-2017-8890 المستندات ذات الصلة: طريقة تصحيح نواة Ubuntu باستخدام جهازين افتراضيين تحليل واستغلال ثغرة CVE-2017-8890 - نظرة عامة تحليل ثغرة CVE-2017-8890 - المبادئ استغلال ثغرة CVE-2017-8890 root ubuntu 16.04@kernel 4.10 استغلال ثغرة CVE-2017-8890 root nexus6p@kernel 3.10...

CVE-2025-38502-Linux-LPE

Abraxas Labs · abraxaslabs.tech · github.com/abraxas · @abraxasnull CVE-2025-38502 Accès hors limites au stockage local de cgroup BPF du noyau Linux via des tail calls | ---|--- CVE| CVE-2025-38502 CWE| CWE-125 — Lecture hors limites Éditeur| Noyau Linux Composant| kernel/bpf/core.c,...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...