CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.- POC shows how to leak postgresql stuff cause hugefile sub-system. Based on https://x.com/spendergrsec/status/1993794163880718700?s=20...

EternalBlue-Exploit-Demonstration-MS17-010

EternalBlue Exploit Demonstration MS17-010 Cybersecurity lab demonstrating exploitation of CVE-2017-0144 EternalBlue using Metasploit against a vulnerable Windows 7 system, achieving SYSTEM-level access via Meterpreter. This project also simulates a WannaCry-style ransomware attack SAFE DEMO and...

CVE-2024-51324

CVE-2024-51324 — BYOVD: BdApiUtil64.sys · Master's Thesis Research -orange Bring Your Own Vulnerable Driver BYOVD — Baidu AntivirusBdApiUtil64.sys Three undocumented kernel primitives: process termination, arbitrary file deletion, and in-use file deletion with SectionObjectPointer bypass Affected...

RootMyVivo-Exploit

RMV Exploit — CVE-2026-43499 for vivo and iQOO A fork of boxiaolanya2008/CVE-2026-43499-Neo11Plus, reworked for RootMyVivo. Everything that broke the phone after rooting is gone; the exploit core keeps its proven timing. Русский · 中文 Targets Directory| Device| Kernel| Offset source ---|---|---|--...

razer-lycosa-kernel-lpe-BYOVD-Vulnerability-PoC

Lycosa.sys, Razer: two kernel vulnerabilities reachable by any local user Discovered through https://github.com/416rehman/DeepZero Vendor: Razer Inc. Component: Lycosa.sys, the Razer Lycosa keyboard filter driver, x64 SHA-256: a120a6184ab16864e8a5f1dfd0cd178fca541de463b5cef946e18c34b9b6f716...

CVE-2022-0847

CVE-2022-0847 - Dirty Pipe Exploit A proof-of-concept exploit for CVE-2022-0847 Dirty Pipe, a Linux kernel vulnerability that allows unprivileged users to write to read-only files. Vulnerability Details CVE-2022-0847 affects Linux kernels 5.8 through 5.16. It exploits a race condition in the Linu...

SG-2026-0024

Dirty Frag primitive-only PoC Readable N4C demonstrator for CVE-2026-43284 XFRM/ESP and CVE-2026-43500 RxRPC/RXKAD. The PoC answers one question: can an unprivileged process change the page cache of a root-owned, read-only file through a sharedskbuff fragment? It does not overwrite /usr/bin/su or...

CVE-2026-74586

CVE-2026-74586 — SCTP ASCONF newtransport use-after-free trigger A self-contained, unprivileged PoC for CVE-2026-74586, a use-after-free in the Linux kernel's SCTP ASCONF dynamic address reconfiguration handling. Credit for the bug itself goes to Qing Ming, who reported it upstream; the fix is...

GhostLock-NVIDIA-Shield-9.2.4

GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 port of the GhostLock futex PI use-after-free CVE-2026-43499 for the 2019 NVIDIA Shield TV Pro mdarcy running Shield Experience 9.2.4. The payload changes the credentials of the live ADB daemon, so new ADB shells are UID 0 without a...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers...

LSPromise

LSPromise A complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel. It does not involve memory corruptions or race conditions, so attackers don't need to perform complex heap spraying or bypass mitigations against memory corruption vulnerabilities such ...

hawkopsec

HawkOpsec One-tap Linux OPSEC hardening & anonymity toolkit -0b0d10 HawkOpsec turns a pile of manual privacy commands into security modes you apply with one tap. Pick a mode — the tool starts Tor, configures DNS, randomizes your identity and hardens the kernel for you. Hit RESET and every change ...

CVE-2026-65349

CVE-2026-65349 — getattrlist OOB Write in vfsattrpackinternal Component: XNU VFS — vfsattrpackinternal getattrlist syscall Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds write to caller buffer Impact: Kernel heap corruption; from kernel conte...

CrowArmor

CrowArmor : Linux Driver What is CrowArmor ? CrowArmor is a driver for Linux aimed at system security, we use LSM interfaces to improve kernel security, providing support for MalDec-EDR, code documentation and how to proceed with installation Documentation Development Process The standard practic...

CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

criPPLe

criPPLe Windows kernel driver that removes Process Protection PP and Process Protection Light PPL. This was made with the help of Zero-Point Security's "Offensive Driver Development course" This kernel driver removes the process protection from a given pid, it gets a pointer to the process's...

CVE-2026-65330

CVE-2026-65330 — tmpfs setxattr PAC Bypass Component: XNU VFS — defaultsetxattrdoubleagent tmpfs VNOP Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Fixed PAC diversifier in xattr handler pointer signing Impact: PC control from kernel context; full privile...

Common-Registry-Jmp-RCX

Common-Registry-Jmp-RCX https://www.unknowncheats.me/forum/anti-cheat-bypass/501925-undetected-kernel-communication-method.html https://github.com/EBalloon/Common-Registry NTSTATUS stdcall DriverEntryPDRIVEROBJECT DriverObject, PUNICODESTRING RegistryPath char nvraidbase; // rax char...

CVE-2026-64788

CVE-2026-64788 — IOGPUFamily Use-After-Free Component: IOGPUFamily kernel extension com.apple.iokit.IOGPUFamily Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Use-After-Free in IOGPUDevice::createresourceiosurface Impact: Kernel memory corruption; UAF...