CVE-2025-38001

CVE-2025-38001（RBTree家族闹剧） Linux HFSC Eltree 释放后使用 - Debian 12 PoC 此PoC利用基于RBTree变换的页级纯数据攻击来破坏系统。该漏洞利用代码具有可移植性，适用于所有kernelCTF实例（LTS 6.6.90、COS 109、COS 105）和Debian 12。在Ubuntu LTS上，由于Kmalloc随机缓存，只需进行少量修改。 漏洞分析与漏洞利用开发：https://syst3mfailure.io/rbtree-family-drama. 由提交...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Crear usuario y grupo exim sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Instalar dependencias sudo apt-get update sudo apt-get install -y make build-essential...

Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63917: ip6: vti: Use ip6tnl.net in...

blueborne-CVE-2017-1000251

Linux Kernel 4.13.1 - BlueTooth Buffer Overflow PoC BlueBorne - Prueba de concepto - Desarmado/Sin armar - Solo DoS Caída Esta es una copia del repositorio inicial publicado por @marcinguy, quien luego lo retiró y lo hizo privado...

CVE-2022-0847

CVE-2022-0847 CVE-2022-0847 POC Enlace：https://dirtypipe.cm4all.com/ Reproducir el entorno The vulnerability exists in Ubuntu kernel versions starting from v5.8 all the way up to 5.15 like Linux 5.14.0-9parrot1-amd64 Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664...

CVE-2026-31431

CVE-2026-31431 Detalle de Copy Fail - CVE-2026-31431 https://nvd.nist.gov/vuln/detail/CVE-2026-31431 https://copy.fail/exploit https://xint.io/blog/copy-fail-linux-distributions Distribución / Versión probada Distribución| Versión ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023|...

DirtyCow-EXP

DirtyCow-EXP 编译好的脏牛漏洞（CVE-2016-5195）EXP，分为 Linux 平台 和 Android 平台。 漏洞详细复现过程请参考： https://brucetg.github.io/2018/05/27/DirtyCow%EF%BC%88%E8%84%8F%E7%89%9B%EF%BC%89%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/...

CVE-2026-46331

🚨 CVE-2026-46331 - Linux 内核 COW 漏洞 Linux 内核 net/sched 部分写时复制 COW 页面缓存损坏 -orange?style=for-the-badge 一个由流量控制 tc 数据包编辑子系统中不正确的写时复制 COW 处理引起的 Linux 内核漏洞。 📖 概述 CVE-2026-46331 是一个影响 net/sched 数据包编辑 actpedit 子系统的 Linux 内核漏洞。 该漏洞产生的原因是内核在 实际数据包编辑偏移量被确定之前 就计算了可写的写时复制 COW...

cve-2019-11477-poc

cve-2019-11477-poc 简单测试 1. 启动两个虚拟机 一个用于 SSL 服务器，另一个用于 SSL 客户端 2. 服务器 执行服务器应用程序 cd apps ./server.sh 7000 3. 客户端 安装所需软件包 sudo apt-get install libmnl-dev sudo apt-get install libnetfilter-queue-dev 4. 客户端 在客户端的虚拟机的 /etc/hosts 中添加一条记录 www.alice.com 5. 客户端 将内核模块插入客户端的虚拟机 cd module make sudo insmod...

CVE-2022-0847

信息 Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Date: 03/07/2022 Exploit Author: Max Kellermann Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 利用方法 测试环境： 本地权限提升 cp...

CVE-2022-0847

CVE-2022-0847 描述 - CVE-2022-0847 的 PoC：Linux 内核本地权限提升漏洞。 详情 - 安全研究员 Max Kellermann 负责任地披露了 'Dirty Pipe' 漏洞，并指出该漏洞影响 Linux 内核 5.8 及更高版本，甚至影响 Android 设备。 - 自 5.8 起，Linux 内核中存在一个漏洞，允许覆盖任意只读文件中的数据。这会导致权限提升，因为非特权进程可以将代码注入到 root 进程中。 - 发现了一个缺陷：在 Linux 内核的 copypagetoiterpipe 和 pushpipe 函数中，新的管道缓冲区结构的...

Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in...

SUSE-SU-2026:4498-1 Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283. - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in...

Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63920: ipv6: validate extension header...

SUSE-SU-2026:4497-1 Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension...

CVE-2022-0185

CVE-2022-0185 Este repositorio contiene exploits de demostración para CVE-2022-0185. Aquí hay dos versiones. La versión no kctf versión fuse apunta específicamente a Ubuntu con la versión de kernel 5.11.0-44. No devuelve directamente una shell root, pero hace que /bin/bash sea suid, lo que conduc...

CVE-2026-52924

CVE-2026-52924: Use-After-Free en SCTP en el Manejo de Cookies Obsoletas Resumen de la Vulnerabilidad ID CVE: CVE-2026-52924 Gravedad: CRÍTICA CVSS 9.8 Componente: Kernel de Linux - SCTP Protocolo de Transmisión de Control de Flujo Tipo: Use-After-Free CWE-416, CWE-825 Publicado: 2026-06-24 Estad...

ROOT-OS-DEBIAN-11-CVE-2026-53615 CVE-2026-53615 in util-linux - Patched by Root

Root has patched CVE-2026-53615 in the util-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-14104 CVE-2025-14104 in util-linux - Patched by Root

Root has patched CVE-2025-14104 in the util-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-13595 CVE-2026-13595 in util-linux - Patched by Root

Root has patched CVE-2026-13595 in the util-linux package for Root:Debian:11. Multiple fixed versions available...