CVE-2014-3153

CVE-2014-3153 ubuntu 14.04 64-bit 3.13.0-24-generic...

CVE-2026-64531

CVE-2026-64531 — OVSwrap Linux kernel Open vSwitch module local privilege escalation normal user → root PoC. Exploits the integer wraparound of the 16-bit nlalen field to escalate from a normal user all the way to root. Vulnerability Summary When the nested action stream generated by OVS exceeds...

CVE_2022_46395_Gazelle

Exploit para CVE-2022-46395 para ejecutar en FireTV 3.ª generación Cube Este es un fork del POC para Pixel 6 del investigador de seguridad Man Yue Mo para CVE-2022-46395. Lea su detallado informe sobre la vulnerabilidad aquí. Se han realizado cambios para tener en cuenta el espacio de usuario de ...

exploiting-cve-2017-5123

Exploiting CVE-2017-5123 Introduction This repository is an addition to the article published in MISC Magazine 96. We achieved to elevate our privileges in a reliable way, on our virtual machine with SMEP / SMAP and KASLR enabled. It should however be noted that the system if left in an unstable...

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

Combined Covert Channel: CVE-2023-1206 + CVE-2024-49882 Overview This project demonstrates a covert communication channel using two Linux kernel vulnerabilities: Component| CVE| Purpose ---|---|--- Sync Channel| CVE-2023-1206| Clock synchronization via IPv6 hash collision timing Data Channel|...

Linpmem

Linpmem -- una herramienta de adquisición de memoria física para Linux Linpmem es una herramienta solo para Linux x64 para leer memoria física. Al igual que su contraparte de Windows, Winpmem, esta no es una herramienta tradicional de volcado de memoria. Linpmem ofrece una API para leer desde...

CVE-2021-21551

CVE-2021-21551 Proof of concept exploit for CVE-2021-21551, vulnerability comes from user provided addresses being provided as arguments to a memmove call allowing for an arbitary read/write ioctls 0x9B0C1EC4 and 0x9B0C1EC8 as well as the physical address parameter for a MmMapIoSpace call that...

vpwn

vpwn by qwertyoruiop generic xnu heap overflow exploitation. demo output: $ ./pwn i Preparing payload... i broke out of kaslr, kaslrslide = 0000000001a00000 + Payload successfully crafted. i Manipulating the heap... i Exploit loaded. + got r00t sh-3.2 uname -a Darwin qwertyoruiops-iMac.local 14.3...

CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Linux Kernel Local Privilege Escalation LPE 📖 Overview CVE-2026-64600 "RefluxFS" is a Linux kernel vulnerability affecting the RefluxFS filesystem implementation. The flaw stems from improper validation of filesystem metadata, potentially leading to kernel memory...

CVE-2026-46300

CVE-KERNEL · Linux Kernel LPE Chain Multi-CVE Local Privilege Escalation chain for Linux kernel vulnerabilities uid=1000 → root via xfrm-ESP, RxRPC, or Fragnesia page-cache write Overview CVE-KERNEL is a Python-based Local Privilege Escalation LPE tool that chains multiple Linux kernel CVEs to...

pciem

PCIem Un framework del kernel de Linux que permite la emulación sintética de dispositivos PCIe en espacio de usuario. | Documentación ¿Qué es PCIem? PCIem es un framework que crea dispositivos PCIe virtuales en el kernel de Linux aprovechando algunas técnicas novedosas para presentar tarjetas...

CVE-2024-21305

CVE-2024-21305 This repo contains the report and PoC of CVE-2024-21305, the non-secure Hypervisor-Protected Code Integrity HVCI configuration vulnerability. This vulnerability allowed arbitrary kernel-mode code execution, effectively bypassing HVCI, within the root partition. For the root cause,...

gobee

gobee Write your BPF programs in Go, not C. gobee transpiles a strict subset of Go into BPF C, generates typed Go bindings for the userspace side, and gates loads against the running kernel. The Go ecosystem has solid userspace tooling for BPF. The kernel side has always ended with "now write you...

parallels-plist-escape

parallels-plist-escape This repository contains exploits for CVE-2023-27327 and CVE-2023-27328, which can be used together to escape a Parallels Desktop virtual machine, prior to Parallels Desktop 18.1.1. It also contains code for a required kernel module, in prlmod, which can be used to send...

WinDriver-EXP

PoC Repository for Vulnerable Windows Drivers This repository includes PoC exploits for vulnerabilities in Windows drivers, showcasing flaws that can result in privilege escalation, arbitrary code execution, or other security risks. Intended for research and education only. POCs Vulnerability| CV...

CVE-2024-1086-Exploit

🔒 Proyecto de Exploit CVE-2024-1086 🛡️ Exploit educativo pulido del kernel de Linux para investigación en seguridad Este proyecto proporciona una plantilla robusta y no funcional para estudiar CVE-2024-1086, una vulnerabilidad de use-after-free en el componente netfilter: nftables del kernel de...

linux-kernel-exploits

linux-kernel-exploits Introduction linux-kernel-exploits Vulnerability List CVE Description Kernels CVE–2018–18955 mapwrite in kernel/usernamespace.c allows privilege escalation Linux kernel 4.15.x through 4.19.x before 4.19.2 CVE–2018–1000001 glibc glibc 2.6.22 released in 2007 CVE-2016-2384 a...

CVE-2021-33909

CVE-2021-33909 Secuoya Informe gcc exploit.c -o exploit -lpthread -DBLOCKVIAUSERFAULTFD gcc exploit.hello.c -o exploit.hello -lpthread -lfuse -DFILEOFFSETBITS=64 $ mkdir dir $ ./exploit $pwd/dir id...

CVE-2021-40839

CVE-2021-40839 Dirty Cow kernel exploit without libcrypt dependency...

K50G-POCOF4GT-CVE-2026-43499-PoC

Redmi K50 Gaming ingres — CVE-2026-43499 GhostLock Temporary Root PoC One-click temporary Root without unlocking BL. Uses the GhostLock CVE-2026-43499, futex PI Use-After-Free local privilege escalation chain to obtain a root anchor, then mounts the kernelsu module into the running kernel via...