Copy-Fail-CVE-2026-31431-Lab

Copy Fail CVE-2026-31431 — Exploit Reproduction & Detection Lab This repository documents the end-to-end reproduction, detection engineering, and incident response for CVE-2026-31431 "Copy Fail" , a critical Linux kernel local privilege escalation vulnerability affecting kernels 4.14 through...

ghostlock-aak-apk

GhostLock AAK Launcher CVE-2026-43499 · Linux kernel rtmutex stack Use-After-Free local privilege escalation LPE loader/trigger This repository is a security research and proof-of-concept PoC project , used to demonstrate and verify the trigger flow of the CVE-2026-43499 GhostLock vulnerability i...

CVE-2020-27194

CVE-2020-27194 my exp for CVE-2020-27194, tested on linux kernel 5.8.14. More details : https://ama2in9.top/2020/12/14/CVE-2020-27194/ reference CVE-2020-8835 pwn2own 2020 ebpf 提权漏洞分析 CVE-2020-8835 pwn2own 2020 ebpf 通过任意读写提权分析...

CVE-2019-19781

CVE-2019-19781 Batch Proof of Concept Use Usage Limitations 1. Before use, the folder must contain a "data.txt" file with content: 192.168.1.0/24\n 192.168.2.0/24\n 2. Execute only on Linux: python3 CVE-2019-19781-testbata.py 3. If successfully executed and a vulnerability is found, export to...

Research-CVE-2016-5195

CVE-2016-5195Dirty Cow Cow es copy-on-write , presente en los kernels de Linux desde 2007 y descubierta en 2016. Como estoy haciendo un laboratorio relacionado con este CVE, aprovecharé para escribir un análisis sobre él. 1. Introducción Como el kernel se ejecuta con privilegios de root, puede...

CVE-2024-6387_poc

CVE-2024-6387 Proof of Concept PoC Description This repository contains a PoC for vulnerability CVE-2024-6387, which targets a signal handler race condition in the OpenSSH server sshd on glibc-based Linux systems. The vulnerability allows remote code execution as root by calling...

ansible-mitigate-copyfail-dirtyfrag

Ansible playbook to mitigate CopyFail, DirtyFrag and Fragnesia vulnerabilities Mitigate CopyFail CVE-2026-31431, DirtyFrag CVE-2026-43284 and Fragnesia CVE-2026-46300 vulnerabilities in the Linux Kernel using a simple but effective Ansible playbook. Use this Ansible Playbook to run against your...

CVE-2025-32463_chwoot

🛠️ CVE-2025-32463chwoot - Securely Handle Privileges in Linux 📋 Overview CVE-2025-32463chwoot helps you understand and deal with a specific security vulnerability related to privilege escalation in Linux systems. This tool allows users to explore and test the escalation of privilege to the root...

cryptovenom

CryptoVenom CryptoVenom: 암호학의 스위스 아미 나이프 CryptoVenom이란 무엇인가? CryptoVenom은 다양한 암호 시스템 및 암호 분석 방법을 하나로 모은 오픈소스 도구입니다. 여기에는 고전 알고리즘, 해시 알고리즘, 인코딩 알고리즘, 논리 게이트, 수학 함수, 현대 대칭 및 비대칭 암호화 등이 포함됩니다. CryptoVenom의 목적은 무엇인가? 암호 분석이나 암호 시스템의 사용 및 조작을 더 쉽게 만드는 것입니다. CTF 플레이어이거나 학습 목적으로 호기심 많은 학생이라면 이 도구가 바로 당신...

CVE-2023-50965

💥 CVE-2023-50965 — Stack Buffer Overflow Exploit Linux Proof of Concept exploit for CVE-2023-50965 , demonstrating a stack-based buffer overflow leading to Remote Code Execution RCE on vulnerable systems without exploit mitigations enabled. This project was developed for security research and...

CVE-2019-0708-POC

CVE-2019-0708-POC Working proof of concept for CVE-2019-0708, spawns remote shell. Run with python3, Example python3 CVE-2019-0708-windows.py Different versions are required for linux and Windows. Obfuscated for obvious reasons...

LINUX-VULNERABILITY-CVE-2015-1328

This repository does not have a README...

CVE-2024-28085

Wall-Escape CVE-2024-28085 The util-linux wall command does not filter escape sequences from command line arguments. The vulnerable code was introduced in commit cdd3cc7fa4 2013. Every version since has been vulnerable. A full report can be found here. I have nicknamed this bug "WallEscape". This...

CVE-2026-53266

CVE-2026-53266 — Linux ebtables SNAT ARP-rewrite page-cache write tracking site Source for the CVE-2026-53266 patch-status tracker: a single-page site recording which distributions have shipped a fix for the netfilter bridge ebtables SNAT ARP-rewrite page-cache write in the Linux kernel CISA KEV...

CVE-2025-39682

CVE-2025-39682 — Linux kTLS zero-length rxlist record UAF tracking site Source for the CVE-2025-39682 patch-status tracker: a single-page site recording which distributions have shipped a fix for a use-after-free in the Linux kernel's kTLS receive path net/tls. Where the facts live Everything abo...

diagspill

DiagSpill — Linux kernel SCTP sockdiag heap overflow tracking site Source for the DiagSpill patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP peer transport-count overflow in the Linux kernel CVE-2026-74469, an unprivileged local-user path to a...

chef-ssh-hardening

ssh-hardening libro de recetas de Chef 1 2 3 4 Descripción Este libro de recetas proporciona configuraciones seguras de ssh-client y ssh-server. Este libro de recetas no proporciona capacidades para la gestión de usuarios y/o claves ssh; para eso, utilice otros libros de recetas. Requisitos Chef ...

cve-writeups-and-pocs

CVE-2026-80724 PoC y Write-up CVE-2026-80724 — Kernel de Linux ptp: vmclock: evitar que los mapeos de solo lectura se vuelvan escribibles Prueba de concepto completa + Write-up técnico Investigación de seguridad por Abdifatah Suruur suruur — colección de write-ups de CVE y PoCs para...

CVE-2023-42793

About CVE-2023-42793 You will need to obtain the token first through using different exploit. However, the following exploit will allow you to obtain RCE into the Linux server as it encoded the payload in URL and sends it to the server. How to use python3 ./main -t TEAMCITYTOKEN -u...

CVE-2025-49596-PoC

CVE-2026-23744-PoC Automated PoC for CVE-2026-23744 RCE on MCPJam inspector prior to 1.4.2 on linux targets How to use use netcat to run listener on any port like 9002. nc -nvlp 9002 use the automation like this python3 CVE-2025-49596.py https://mcpjam-server.com...