lulzbuster

Description A multithreaded, very fast and smart HTTPS directory and file bruteforcer written in C on top of libcurl. Given a target URL and a wordlist, it enumerates valid paths by firing concurrent HTTP requests and reporting back the responses that look like real hits i.e. status codes the use...

2022-LPE-UAF

2022-LPE-UAF 未经测试的POC代码 安全研究人员发现了 Linux 内核中的 3 个漏洞，这些漏洞可能允许本地攻击者提升权限并潜在地执行恶意代码。概念验证代码已公开，增加了在野利用的可能性。 关于 Dirtycred 的论文（作者：Zhenpeng） https://zplin.me/papers/DirtyCred-Zhenpeng.pdf DirtyCred 的补丁以及 PoC 的公开版本 https://github.com/Markakd/DirtyCred CVE-2022-2585 - Linux 内核 POSIX CPU 定时器 UAF 'PoC' 代码来源：...

ROOT-OS-ALPINE-318-CVE-2024-28085 CVE-2024-28085 in util-linux - Patched by Root

Root has patched CVE-2024-28085 in the util-linux package for Root:Alpine:3.18. Multiple fixed versions available...

CVE-2026-43499-armv7

CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro 基于 CVE-2026-43499 GhostLock 的 Linux 内核提权漏洞利用尝试 — Huawei Watch 4 Pro MDS-AL00, armv7l 项目概述 本项目是针对 Huawei Watch 4 Pro MDS-AL00, Snapdragon SW5100, HarmonyOS 4.3.0 AOSP 12 设备的 GhostLock 内核漏洞利用尝试，在 ARM 32-bit armv7l 架构上适配。 GhostLock CVE-2026-43499...

hiya

Hiya Autenticación por huella dactilar para Linux. Maneja sudo, su, polkit, desbloqueo de pantalla, claves SSH y passkeys del navegador con un único registro. Reemplaza a fprintd. Funciona con los entornos de escritorio existentes sin necesidad de parchearlos. Requisitos Sensor de huellas...

CVE_2022_0847

CVE20220847 CVE-2022-0847: Vulnerabilidad de escalada de privilegios del kernel de Linux POC Una simple prueba de concepto para obtener una shell de root. $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...

CVE-2026-97592

A flaw was found in the Linux kernel. During Advanced Encryption Standard AES cryptographic operations on s390 architectures, temporary memory buffers and parameter blocks are not properly cleared after use or during certain error paths. A local attacker could exploit this flaw to access residual...

DarkSpiritz

DarkSpiritz Python3 Un framework de pruebas de penetración para sistemas Linux y Windows. Repositorio oficial de DarkSpiritz. La antigua organización fue eliminada por un miembro rebelde. ¿Qué es DarkSpiritz? Creado por el equipo SynTel, fue un proyecto de uno de los propietarios para actualizar ...

CVE-2026-97590

A flaw was found in the Linux kernel. This vulnerability leads to information disclosure during protected Advanced Encryption Standard PAES operations on s390 architectures. Because the kernel fails to clear temporary memory buffers after cryptographic processing, a local attacker could access...

CVE-2026-97591

A flaw was found in the Linux kernel's s390 crypto subsystem. When processing Protected Key HMAC PHMAC operations, the driver improperly treats busy queue status codes from the cryptographic engine as failure conditions. A local user could exploit this flaw by submitting cryptographic requests...

CVE-2026-97415

A flaw was found in the Linux kernel's Btrfs file system. When processing subvolume reference items, the file system fails to properly validate on-disk name lengths before reading them. A local user could exploit this vulnerability by mounting a maliciously crafted file system image and querying...

CyberMeowfia

Sitio web: nebusec.ai · Twitter @nebusecurity · Lista de bugs 885+ Seguimiento de IonStack, sigue https://github.com/NebuSec/CyberMeowfia/issues/44 Últimas investigaciones IonStack parte II : GhostLock, un stack-UAF que ha existido en TODAS las distribuciones de Linux durante 15 años Linux Kernel...

CVE-2026-97414

A flaw was found in the Linux kernel's MediaTek audio driver. When suspending the audio device, the driver fails to verify whether memory allocation for the register backup buffer succeeded before accessing it. A local user capable of triggering power management operations during low-memory...

CVE-2026-97413

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. A malicious client can trigger an integer underflow by sending a specially crafted message with an oversized length field during read or write operations. This improper validation leads to an out-of-bounds memory...

CVE-2026-97412

A flaw was found in the Linux kernel's pdscore driver. During device teardown, the driver releases Direct Memory Access DMA buffers without disabling bus mastering, allowing the device to continue writing to system memory after it has been freed. A local user with administrative privileges could...

CVE-2026-97411

A flaw was found in the Linux kernel's IBM EMAC network driver. During module removal, the driver unconditionally attempts to disable network polling routines even if they were never enabled or were already stopped. This improper state handling causes the kernel to enter an infinite loop, resulti...

CVE-2026-97410

A flaw was found in the Linux kernel. This race condition vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. The issue occurs when removing a netconsole logging target concurrently while an unregistered network interface undergoes cleanup. Because the remov...

Singularity

Singularity - Rootkit Stealth de Kernel Linux "¿Le damos un poco de trabajo a la forense?" Este proyecto fue inspirado por una mujer muy especial para mí: Mocinha Singularity es un potente rootkit de módulo de kernel de Linux LKM diseñado para kernels modernos 6.x. Proporciona capacidades...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

ProcDump-for-Linux

ProcDump ProcDump es una reinvención de la clásica herramienta ProcDump del conjunto Sysinternals para Windows, adaptada para Linux y Mac. ProcDump proporciona una manera conveniente para que los desarrolladores de Linux y Mac creen volcados de núcleo de sus aplicaciones basados en disparadores d...