359866 matches found
CVE-2026-23111-nftables-lab
CVE-2026-23111 nftables LPE: exposure check and safe lab Defensive tooling and a reproducible virtual-machine lab for CVE-2026-23111, the nftables use-after-free local privilege escalation in the Linux kernel an inverted element-activity check in nftmapcatchallactivate, the "off by !" bug. An...
claude_opus_cve_2023_0266
Demonstration that Claude 3 Opus does not understand CVE-2023-0266 and does not find it Demo 1. Even if told where the bug is Opus does not find it, and hallucinates the presence of lock acquisitions Demo 2. "Prompt engineering" aka telling the LLM exactly how to find the bug also doesn't work De...
CVE-2026-31402
🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...
dirtyPipe-automaticRoot
Dirty Pipe automatic root exploit CVE-2022-0847 Dependencies: Python 3.10 or above How to use: Automatic root: $ python3.10 dirtyPipe.py -a + hjacking super user in /etc/passwd + dropipng shell Write a no write permission, immutable or read-only mounted file: $ python3.10 dirtyPipe.py -w FILE...
cve-2026-46331-audit
cve-2026-46331-audit -7.8%20HIGH-orange?style=flat-square Read-only audit script for CVE-2026-46331 a.k.a. pedit COW — a partial copy-on-write bug in the Linux kernel's net/sched actpedit action that lets a local unprivileged user corrupt page cache memory and escalate to root. | | | \ | | / / \ ...
CVE_2026_31431
CVE-2026-31431 Copy Fail – a 4‑byte page‑cache write primitive in the Linux kernel's authencesn AEAD template, exploitable via AFALG + splice. CVE-2026-31431 is a deterministic, race‑free logic bug in the Linux kernel. An unprivileged local user can overwrite 4 bytes in the page‑cache of any...
CVE-2022-0847-dirty-pipe-checker
This repository does not have a README...
CVE-2019-13272
CVE-2019-13272 Linux local root exploit Linux 4.10 5.1.17 PTRACETRACEME local root CVE-2019-13272 In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtai...
CVE-2018-7273
include include include include include include include include include include static int driveselectorint head return head 2; void fdrecalibrateint fd struct floppyrawcmd rawcmd; int tmp; rawcmd.flags = FDRAWINTR; rawcmd.cmdcount = 2; // set up the command rawcmd.cmdrawcmd.cmdcount++ = 0x07;...
SYNwall
SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...
CVE-2022-0847-DirtyPipe-Exploit
What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of concept. This exploit is merely...
dirtypipe
About: Title: DirtyPipe Description: Exploit for a new Linux vulnerability known as 'Dirty PipeCVE-2022-0847' allows local users to gain root privileges. AUTHOR: drapl0n Version: 1.0 Category: Execution Target: Linux operating systems. Attackmodes: HID, Storage DirtyPipe: Exploit for a new Linux...
CVE-2019-10207
CVE-2019-10207 PoC for CVE-2019-10207 linux kernel: bluetooth: hciuart: kernel NULL pointer dereference gcc CVE-2019-10207.c -o cve-2019-10207-poc -static test on 4.20.0 kernel compile CONFIG must be opened: CONFIGBTHCIUARTMRVL=y CONFIGBTMRVL=y...
SPiCa
SPiCa System Process Integrity & Cross-view Analysis "I'm going to sing, so shine bright, SPiCa..." SPiCa is an eBPF-based Linux rootkit detector written in Rust. The name comes from the Hatsune Miku song SPiCa and the star it references — Spica Alpha Virginis, the brightest point in Virgo. What...
CVE-2025-38001
CVE-2025-38001---Linux-Kernel-HFSC-RBTree-Use-After-Free-Research This repository contains a Proof of Concept PoC for the CVE-2025-38001 security vulnerability that targets the HFSC module in the Linux Kernel. Created specifically as learning material for kernel memory corruption and security...
blueborne-CVE-2017-1000251
Linux Kernel 4.13.1 - BlueTooth Buffer Overflow PoC BlueBorne - Proof of Concept - Unarmed/Unweaponized - DoS Crash only This is a copy of the initial repository published by @marcinguy who then took it down and made private...
CVE-2026-46333
🚀 CVE-2026-46333 - ssh-keysign-pwn High-quality Proof of Concept for the Linux kernel race condition vulnerability A clean and reliable proof-of-concept exploit for CVE-2026-46333 — Local information disclosure via race condition in the Linux kernel's process exit path. 🖼️ Screenshot Successfully...
itscape
ITScape — Linux KVM/arm64 guest-to-host escape tracking site Source for the ITScape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/arm64 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affect...
DIRTY-FRAG-Detection-with-Wazuh-4.14.4
DIRTY FRAG Detection with Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Detection engineering for the Dirty Frag kernel LPE - Ubuntu / RHEL / Debian / Amazon Linux What is Dirty Frag? CVE-2026-43284 / CVE-2026-43500 is a Linux kernel Local Privilege Escalation LPE that chains two independent...