445744 matches found
CVE-2017-5123
CVE-2017-5123 Linux privilege escalation exploiting waitid syscall. The exploit is brought to you by @XeR0x2A and @chaignc from HexpressoTeam for educational purposes only. The bug was introduced the 2017-05-21 and fixed 2017-10-09, 4.14.0-rc4+ is known vulnerable. asciicast If you have a...
KDU
KDU Kernel Driver Utility System Requirements x64 Windows 7/8/8.1/10/11; Administrative privilege is required. Purpose and Features The purpose of this tool is to provide a simple way to explore the Windows kernel/components without requiring extensive setup or a local debugger. It features:...
CVE-2025-50168-pwn2own-berlin-2025
Author: D4m0n CVE-2025-50168 This is an exploit submitted to Pwn2Own Berlin 2025 - LPE Category. The vulnerability occurs in Win32kbase!DirectComposition, and further details can be found in the blog post. Acknowledgements kASLR bypass technique: prefetch-tool by carrotc4k3 Special thanks to: Dav...
CVE-2026-72366
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfscreatewritereq to handle async cache object creation netfscreatewritereq will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got far enough...
oppo-ghostlock
oppo-ghostlock GhostLock CVE-2026-43499 โ OPPO Find N2 Linux ๅ ๆ ธๆๆ็ ็ฉถ ้กน็ฎๆฆ่ฟฐ GhostLock CVE-2026-43499 ๆฏไธไธชๅฝฑๅ Linux 2.6.39 ่ณ 7.1-rc1 ็ๅ ๆ ธๆ UAF ๆผๆด๏ผ้่ฟ FUTEXCMPREQUEUEPI ็ซๆๆกไปถ่งฆๅใๆฌ้กน็ฎๅฐ NebuSec/CyberMeowfia ็ x8664 exploit ้้ ๅฐ OPPO Find N2 ARM64, kernel 5.10.236ใ ้กน็ฎ็ถๆ ่ฟญไปฃไธญ โ ๅคไธชๅฉ็จ้ถๆฎตๅทฒ้ช่ฏ้่ฟ๏ผไฝๆ ธๅฟ้ปๅก็น๏ผCFI bypass /...
oppo-ghostlock
oppo-ghostlock GhostLock CVE-2026-43499 โ OPPO Find N2 Linux Kernel Privilege Escalation Research Project Overview GhostLock CVE-2026-43499 is a kernel stack UAF vulnerability affecting Linux 2.6.39 through 7.1-rc1, triggered via a FUTEXCMPREQUEUEPI race condition. This project ports the x8664...
cve-2025-39682
Exploit de CVE-2025-39682 en instancia de mitigaciรณn de kernelCTF Este es tambiรฉn mi primer exploit de 1 dรญa ? no sรฉ, esta es una variante de CVE-2024-58239. Parche: tls: corrige el manejo de registros de longitud cero en rxlist Este CVE se usรณ en exp398 y exp403. Hoja de cรกlculo de kernelCTF. Pa...
GenEtherExploit
ES GenEtherExploit es un exploit de prueba de concepto PoC para la vulnerabilidad de macOS CVE-2023-40404. Este PoC utiliza las APIs de IOKit para interactuar con el servicio de red IOUserEthernetResource, manipulando las interfaces de red del sistema. El propรณsito de este exploit es demostrar un...
CVE-2022-32932
CVE-2022-32932 : ZinComputeProgramUpdateMutables OOB write due to double fetch issue ์ ์ commnet CVE-2022-32932 is another vulnerability I discovered in the ANE kernel interface; this is a double fetch issue that resulted in an interesting OOB write. Analysis: H11ANEIn::patchMutableSurface reachab...
systeminformer
System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...
poc-cve-collection
poc-cve-collection Poc CVE Collection ๐งช Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example CVE-2026-31431 Title crypto: algifaead - Revert to operatin...
PegasusX
PegasusX OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656 CVEs Analysis & Writeup A detailed analysis of the CVEs used in this PoC is available here: Analysis and exploitation of Pegasus kernel vulnerabilities CVE-2016-4655 / CVE-2016-4656...
SmmExploit
SmmExploit This is a report and an exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303. The issue was fixed in the version 304. Issue Description Summary UX360CA BIOS version 303 has 3 vulnerable modules that allow an attacker wit...
CVE-2026-90136
A flaw was found in the Linux kernel's AMD HSMP Host System Management Port hardware monitoring hwmon driver. A local user can trigger an issue by attempting to set a negative power cap value. Due to an incorrect conversion of this negative input, a nonsensical, extremely high power limit is sent...
CVE-2026-90202
A flaw was found in the Linux kernel's mpt3sas SCSI driver. The basereleasememorypools function attempts to free PCIe SGL Scatter-Gather List buffers that were never allocated, particularly after a partial setup failure. This can lead to a NULL pointer dereference, potentially causing a system...
CVE-2026-80898
A flaw was found in the netfs component of the Linux kernel. When a copy-to-cache append operation fails, the PGprivate2 state and its associated reference are not properly released. This oversight can lead to a resource leak, potentially causing system instability or a denial of service DoS...
CVE-2026-80897
A flaw was found in the netfs component of the Linux kernel. When netfspreparereaditerator processes readahead folios, it may fail to release these folios if an error occurs during the rollingbufferloadfromra operation. This oversight can lead to a memory leak, potentially allowing a local attack...
CVE-2026-80727
A flaw was found in the Linux kernel's x86 Machine Check Exception MCE handling. During the discovery of Corrected Machine Check Interrupts CMCI, a timer used for storm detection is modified before it is properly initialized. This improper timer setup can lead to kernel warnings and system...
CVE-2026-92493
A flaw was found in the Linux kernel's amd-pstate-ut driver. A local user can trigger a kernel NULL pointer dereference by loading the amdpstateut module on a non-AMD platform, such as an Intel system. This can lead to a system crash, resulting in a Denial of Service DoS...
CVE-2026-89894
A flaw was found in the Linux kernel's cx231xx media driver. A local attacker can exploit this vulnerability by manipulating video and Vertical Blanking Interval VBI queue operations. This allows for a heap out-of-bounds write, which could lead to arbitrary code execution or a denial of service...