CVE-2024-20698

CVE-2024-20698 About this vulnerability: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20698 Analysis of the patch In the ntoskrnl.exe we have two patched functions: sub1406AE224 and WbAddLookupEntryEx. The vulnerable function is WbAddLookupEntryEx. Paths to this function: To cal...

ghostlock-x200-root

GhostLock-X200 v1.3.5 ⚠️ Legal and Safety Notice Please Read First This repository is intended solely for security research and educational purposes , and may only be used on devices that you own or for which you have obtained explicit written authorization. Using this tool on others' devices...

PegasusX

PegasusX OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656 CVEs Analysis & Writeup A detailed analysis of the CVEs used in this PoC is available here: Analysis and exploitation of Pegasus kernel vulnerabilities CVE-2016-4655 / CVE-2016-4656...

linux-4.19.72_CVE-2022-36946

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2015-6640

CVE-2015-6640 poc by Edward Hung https://source.android.com/security/bulletin/2016-01-01.html https://android.googlesource.com/kernel/common/+/69bfe2d957d903521d32324190c2754cb073be15%5E%21/F0...

CVE-2019-2215

CVE-2019-2215 Android Kernel Vulnerability CVE-2019-2215 temporary root PoC. It works on Google Pixel 2/Pixel 2 XL walleye/taimen devices running the September 2019 QP1A.190711.020 image with kernel version-BuildID 4.4.177-g83bee1dc48e8. Usage Now, Binary support arm64 only. $ git clone...

CVE-2026-53359

CVE-2026-53359 In the Linux kernel, the following vulnerability has been... - https://github.com/advisories/GHSA-wpw8-53h7-xqcq ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration...

cybermeowfia-termux

CyberMeowfia Termux Root Manager Termux privilege escalation tool and Root permission manager based on CVE-2026-43501 kernel vulnerability. Features CVE-2026-43501 kernel vulnerability exploitation Flask web management interface 25 APIs HMAC-SHA256 token authentication Process management, file...

CVE-2025-53136

CVE-2025-53136 Kernel Information Disclosure through Race condition . https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43511 https://www.crowdfense.com/nt-os-kernel-information-disclosure-vulnerability-cve-2025-53136/...

Android-CVE-2026-43499

CVE-2026-43499 Detector Android app that detects the kernel vulnerability CVE-2026-43499 — a use-after-free in rtmutex triggered via futexrequeue. Vulnerability | ---|--- CVE| CVE-2026-43499 Type| Use-after-free Component| kernel/locking/rtmutex.c Trigger| futexrequeue → proxy-lock rollback in...

CVE-2025-21692-poc

CVE-2025-21692-poc This is code for my exploit of the CVE-2025-21692 ets qdisc vulnerability, which accompanies my writeup. Bear in mind that as specified in the writeup the kernel version was patched to enable the vulnerability, 6.6.75 is not vulnerable without removing the patch, but on older,...

AV_Kernel_Vulns

AVKernelVulns Pocs for Antivirus Software‘s Kernel Vulnerabilities found by myself...

copyfailscan

copyfailscan Bash helper: discover hosts optional CIDR via nmap, then SSH read-only checks for CVE-2026-31431 Copy Fail / algifaead, CVE-2026-31677 / CVE-2026-43077 AFALG RX heuristics, CVE-2026-23111 nftables + user namespaces, CVE-2026-23102 arm64 SVE/SME. Heuristics only — not an exploit;...

ghostlock-x200-app

GhostLock X200 App Current release: 1.1.0. Download release · Changelog A one-tap on-device root App for vivo X200 , based on the GhostLock CVE-2026-43499 kernel vulnerability: no flashing, no bootloader unlocking, no data wiping. After running, you get temporary root , which is lost after a...

CVE-2022-0847

CVE-2022-0847 Simple reproduction of CVE-2022-0847 Disclosure original address: https://dirtypipe.cm4all.com/ Reproduction Environment Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencies gcc Usage Steps git clone...

Kernel-Exploits

Kernel Exploits Repository for kernel exploits...

CVE-2022-0847

CVE-2022-0847 Simple reproduction of CVE-2022-0847 Original article by the disclosing author: https://dirtypipe.cm4all.com/ Reproduction Environment Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencies gcc Usage Steps git clone...

CVE-2024-38063-

CVE-2024-38063- Remotely Exploiting The Kernel Via IPv6 CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6 Marcus Hutchins Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys the kernel driver responsible for handling TCP/IP packets. A...

ansible-role-cve

Ansible Role: CVE This role mitigates/patches the defined CVEs. Role Variables Dirty COW vuln. http://dirtycow.ninja. Defaults to false. This mitigation will need to be run everytime the server it has been applied on restarts. cve20165195: false Example Playbook --- - hosts: localhost connection:...

linux-4.19.72_CVE-2020-14356

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...