CVE-2026-97494

A flaw was found in the Linux kernel's AMD GPU driver. The driver fails to validate the size of firmware images before copying them into the Platform Security Processor PSP private buffer. A local user could exploit this vulnerability by loading an oversized or malformed firmware image, triggerin...

CVE-2026-97493

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. The driver fails to validate the size of Video BIOS VBIOS tables, allowing the calculated entry count to exceed the bounds of an internal array. A local attacker or compromised firmware image could exploit this flaw to trigger an...

xpid

xpid It's nmap but for pids. 🤓 Please help me become an independent programmer by donating directly below. xpid gives a user the ability to "investigate" for process details on a Linux system. For example a sleeping thread will have a directory /proc/pid that can be navigated to, but not listed...

USN-8850-1 linux-bluefield vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - OCFS2 file system; - IPv6 networking; - Netfilter; - SCTP protocol;...

USN-8850-1: Linux kernel (BlueField) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - OCFS2 file system; - IPv6 networking; - Netfilter; - SCTP protocol;...

CVE-2022-29968

CVE-2022-29968 Exploit de prueba de concepto para CVE-2022-29968 memoria no inicializada en el kernel de Linux, específicamente el subsistema iouring. La caída fue encontrada con Syzkaller. La caída fue analizada por Joseph Ravichandran y Michael Wang. El exploit fue escrito por Joseph...

CVE-2018-17182

CVE-2018-17182 Vulnerabilidad de escalada de privilegios VMA-UAF en el kernel de Linux CVE-2018-17182 Acerca de Los investigadores de seguridad de Google Project Zero publicaron los detalles y un exploit de prueba de concepto PoC para una vulnerabilidad de alta gravedad presente en el kernel de...

USN-8849-1: Linux kernel (NVIDIA Tegra) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8818-4: Linux kernel vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8730-7: Linux kernel (FIPS) vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...

goBox

goBox GO sandbox to run untrusted code. goBox uses Ptrace to hook into READ syscalls, giving you the option to accept or deny syscalls before they are executed. Usage Usage of ./gobox: gobox FLAGS command flags: -h Print Usage. -n value A glob pattern for automatically blocking file reads. -y val...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

spectreScope

spectreScope La demostración del ataque de ejecución especulativa Spectre CVE-2017-5753, CVE-2017-5715. Probado en macOS Intel - Apple MacBook Pro Retina, 15 pulgadas, finales de 2013 - macOS High Sierra 10.13.2 - 1 IntelR CoreTM i7-4750HQ CPU @ 2.00GHz - git 2.14.3 - cmake 3.10.1 - Xcode 9.2 Lin...

CVE-2025-32462

CVE-2025-32462 - Exploit de Bypass de Host de Sudo Descubrimiento Original Esta vulnerabilidad fue descubierta por Rich Mirch. Más detalles se pueden encontrar en: https://cxsecurity.com/issue/WLB-2025070022 Acerca de Este script es un exploit para CVE-2025-32462, que permite la escalada de...

dnxfirewall

NOTICE: The license has changed from the CMD version GPLv3. The 'FULL' version current branch is licensed under AGPLv3. Overview DNXFIREWALL™ is an optimized/high performance collection of applications and services to convert a standard linux system into a zone based next generation firewall. The...

pythem

pythem - Framework de Pruebas de Penetración pythem es un framework multi-propósito de pentest escrito en Python. Ha sido desarrollado para ser utilizado por investigadores de seguridad y profesionales de la seguridad. La herramienta está destinada a ser utilizada solo para actos dentro de la ley...

wifi-hacker

Script de shell para atacar conexiones inalámbricas utilizando herramientas integradas de Kali. Soporta todos los tipos de seguridad WEP, WPS, WPA, WPA2 !Imagenhttps://assets.kitploit.com/production/public/readmes/placeholders/f0fc86cfe65f76d40e15aaec61704ec8220a56dc89d4be...

CVE-2022-0847

CVE-2022-0847 Descripción - POC para CVE-2022-0847: Vulnerabilidad de escalada de privilegios local en el kernel de Linux. - creado por antx el 2022-03-08. Detalle - El investigador de seguridad Max Kellermann reveló responsablemente la vulnerabilidad 'Dirty Pipe' y afirmó que afecta al kernel...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...