561338 matches found
linux-4.19.72_CVE-2022-42896
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
OverlayFS-PrivEsc-CVE-2022-0944
CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS 🛡️ Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. 📜 Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers...
Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074
Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074...
DirtyCred
DirtyCred: Linux 커널에서 권한 상승 DirtyCred는 권한이 없는 커널 자격 증명을 권한 있는 자격 증명으로 교체하여 권한을 상승시키는 커널 익스플로잇 개념입니다. 커널 힙의 중요한 데이터 필드를 덮어쓰는 대신, DirtyCred는 힙 메모리 재사용 메커니즘을 악용하여 권한을 획득합니다. 개념은 간단하지만 효과적입니다. 자세한 내용은 Blackhat 프레젠테이션 또는 CCS 논문을 참조하세요. 익스플로잇 효과 데이터 전용 : KASLR을 우회하거나 커널 힙을 유출할 필요가 없습니다. 범용성 : DirtyCred...
CVE-2016-0728
CVE-2016-0728 Seccamp 2017 Assignment The following program exploits a vulnerability present in the Linux kernel versions 3.8 to 4.4. Explain the malfunction that occurs when this program is executed. Also, write an exploit that achieves root privilege escalation by further exploiting this...
CVE-2021-4034
개념 증명PoC: CVE-2021-4034 PwnKit 참고: 이 저장소와 그 내용은 학사 졸업 논문GrAL의 일부이며, 오직 교육적 목적과 학술 연구를 위해 작성되었습니다. 설명 이 저장소는 CVE-2021-4034 취약점PwnKit이라고도 함에 대한 개념 증명PoC - Proof of Concept을 포함합니다. 이 메모리 손상 취약점은 Linux 시스템의 Polkit 구성 요소인 pkexec에 영향을 미칩니다. pkexec를 빈 인자 목록argc == 0으로 실행하면 환경 변수를 조작하여 임의의 공유 라이브러리를 강제로...
CVE-2023-32233
CVE-2023-32233 5.x Kernel Adaptation Existing Exploits 1. https://github.com/Liuk3r/CVE-2023-32233/tree/main 2. https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-32233mitigation Reason Since the lower version listdelrcu. Method This exploit has been tested on...
CVE-2022-0995
CVE-2022-0995 CVE-2022-0995 exploit writeups exploit target : linux-5.13.18 refernces : https://docs.kernel.org/core-api/watchqueue.htmloverview https://bsauce.github.io/2022/04/15/CVE-2022-0995/ https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html...
CVE-2011-3368
CVE-2011-3368 PoC Exploit. cve-2011-3368 Install: git clone https://github.com/colorblindpentester/CVE-2011-3368 cd CVE-2011-3368 python2 CVE-2011-3368.py Tested on: OS X macos Parrot OS Kali linux...
linux-4.19.72_CVE-2019-19447
This repository does not have a README...
CVE-2022-0995
CVE-2022-0995 Exploit for CVE-2022-0995. Uses a heap out-of-bounds write in the watchqueue component of the Linux kernel. A similar technique is described in this research https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. The exploit has been tested on Ubuntu 21.1...
cve-2021-3490-ebpf-analysis
cve-2021-3490-ebpf-analysis Research implementation demonstrating interaction with Linux eBPF subsystem related to CVE-2021-3490. Includes BPF map creation, syscall wrappers, namespace setup, and verifier analysis. For educational and security research purposes only. CVE-2021-3490 – eBPF Verifier...
patch_CVE-2023-22809
patchCVE-2023-22809 Bash Script: sudo Installation This Bash script automates the installation of the latest version of sudo on your system. Prerequisites Linux-based operating system wget package installed can be installed using the package manager Usage 1. Clone or download this repository to...
cve-2024-6387-poc
cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...
cve-2018-12386
Firefox Sandboxed RCE Exploit CVE-2018-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a PoC I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...
dirtycow-lab
dirtycow-lab Dirty COW vulnerability exploitation CVE-2016-5195 on Ubuntu 16.04.1. cat README.md :/. 4. Execution and escalation : chmod +x /dirty && /dirty → su root pass dirtyCowFun. 5. Flag : cat /root/flag.txt → 4GEEKSY0uG0tR00t. ✅ Result root@ubuntu:/home/student whoami root...
Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284
원격 git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd...
ovswrap
OVSwrap — Linux 커널 Open vSwitch 데이터패스 오버플로 추적 사이트 OVSwrap 패치 상태 추적기의 소스: Linux 커널의 Open vSwitch 데이터패스 오버플로에 대한 수정을 어떤 배포판이 제공했는지 기록하는 단일 페이지 사이트입니다. 실제 정보가 있는 곳 버그에 관한 모든 정보CVE ID, 영향을 받는 버전 및 수정된 버전, 업스트림 수정 커밋, 발견 및 공개 공로, 현재 배포판별 패치 상태는 이 README가 아닌 추적기 페이지에 있습니다: 렌더링 결과:...
CVE-2022-0847
CVE-2022-0847 exploit of CVE-2022-0847 which directly remove password of the root account Usage: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit Requrements: gcc Work summery: The traditional classic exploit POC of Max Kellermann used to add a user with root privilage but in this POC exploit, It...