how-to-bypass-aslr-on-linux-x86_64

Взлом 64-битного ASLR на Linux x86-64 В этой статье я расскажу о применении техники, описанной Samuel Groß в его Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass, для обхода ASLR на Linux x8664. Чтобы это продемонстрировать, я решу pwnable-задание с...

chimera

Chimera Exécutez en bac à sable du code non fiable avec un accès sécurisé à l'hôte. Chimera est un bac à sable en espace utilisateur pour du code que vous ne maîtrisez pas totalement — un outil naturel pour les agents de codage qui exécutent des commandes arbitraires et générées sur une machine...

CVE-2026-31431

Описание: Cfail — это моя реализация CVE-2026-31431 также известной как Copyfail на C++ и ассемблере x86-64, без каких-либо зависимостей, включая libc. Фактически, вы получаете универсальный исполняемый файл, способный работать автономно в любом дистрибутиве Linux x86-64, благодаря минимальной...

monomorph

════════════════════════════════════╦═══ ╔═╦═╗ ╔═╗ ╔═╗ ╔═╗ ╔═╦═╗ ╔═╗ ╔══╔═╗ ╠═╗ ═╩ ╩ ╩═╚═╝═╩ ╩═╚═╝═╩ ╩ ╩═╚═╝═╩ ╠═╝═╩ ╩═ ════════════════════════════════╩═══════ Par Retr0id ═══ Packeur de Shellcode Monomorphe MD5 ═══ UTILISATION : python3 monomorph.py fichierentrée fichiersortie fichierpayload Qu...

cve-2011-3026-firefox

cve-2011-3026-firefox Пример эксплуатации CVE-2011-3026 в Firefox Linux/x86 из нашего доклада на Black Hat 2012: "Эксплуатация диспетчера памяти jemalloc: захват кучи Firefox" Оригинальные слайды доступны по адресу: https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis Обновлённ...

CVE-2026-31431

CVE-2026-31431 Стандартный бинарник CopyFail Получайте все новые CVE-оповещения на https://exploitroom.com mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, for GNU/Linux 3.2.0...

Exploit for Privilege Chaining in Canonical Ubuntu_Linux

CVE-2026-3888 - snap-confine - Escalacion de Privilegios a Roo...

Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash

В этом репозитории нет README...

Linux Distros Unpatched Vulnerability : CVE-2026-89443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate level in perf mask ioctls isstifgetperflevelmask and isstifgetbasefreqmask use the user-provided level as an index into perflevels...

Linux Distros Unpatched Vulnerability : CVE-2026-89438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU...

Linux Distros Unpatched Vulnerability : CVE-2026-81016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a...

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

Linux Distros Unpatched Vulnerability : CVE-2026-86315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to...

CVE-2026-86315: Numeric Truncation Error

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

The vulnerability of the efi_crash_gracefully_on_page_fault() function in the arch/x86/platform/efi/quirks.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the efecrashgracefullyonpagefault function in the arch/x86/platform/efi/quirks.c module of the Linux operating system’s kernel support for x86 platforms is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an...

The vulnerability of the set_new_password() function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c driver for X86 Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

FTP Fetch

Fetch and execute a x86 payload from an FTP server. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP include...

FTP Fetch, Bind IPv6 TCP Stager with UUID Support (Linux x86)

Fetch and execute a x86 payload from an FTP server. Listen for an IPv6 connection with UUID Support Linux x86 Module Options...

MAL-2026-4719 Malicious code in weavedb-exm-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3992f423f88c69e8c00223cc0ef81f970b8e178f1854beb00ef443586302ad89 package.json declares "preinstall": "./bin/install-deps", which runs a 976KB UPX-packed Linux x86 ELF binary on every npm install. The package...