chimera

Chimera Sandbox untrusted code with safe access to the host. Chimera is a userspace sandbox for code you don't fully trust — a natural fit for coding agents that run arbitrary, generated commands on a machine they share with you. It confines what a process can do to the host while still letting i...

monomorph

════════════════════════════════════╦═══ ╔═╦═╗ ╔═╗ ╔═╗ ╔═╗ ╔═╦═╗ ╔═╗ ╔══╔═╗ ╠═╗ ═╩ ╩ ╩═╚═╝═╩ ╩═╚═╝═╩ ╩ ╩═╚═╝═╩ ╠═╝═╩ ╩═ ════════════════════════════════╩═══════ By Retr0id root@kitploit: ═══ MD5-Monomorphic Shellcode Packer ═══ USAGE: python3 monomorph.py inputfile outputfile payloadfile...

cve-2011-3026-firefox

cve-2011-3026-firefox 在 Firefox（Linux/x86）上利用 CVE-2011-3026 的示例，来自我们 Black Hat 2012 的演讲： “利用 jemalloc 内存分配器：掌控 Firefox 的堆” 原始幻灯片可在以下地址获取： https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis 更新后的幻灯片位于： http://census-labs.com/news/2012/08/03/blackhat-usa-2012-update/ argp &...

how-to-bypass-aslr-on-linux-x86_64

Rompiendo ASLR de 64 bits en Linux x86-64 En este artículo, hablaré sobre la aplicación de la técnica descrita por Samuel Groß en su Explotación remota de iPhone Parte 2: Aportando luz a la oscuridad -- un bypass remoto de ASLR, para evadir ASLR en Linux x8664. Para mostrarlo, voy a resolver un...

CVE-2026-31431

Description: Cfail 是我用 C++ 和 x86-64 汇编语言实现的 CVE-2026-31431（又名 Copyfail），完全无需任何依赖，包括 libc。实际上，通过最小化实现标准库，您可以得到一个通用的可执行文件，能够在每个 Linux x86-64 发行版上独立运行。这使得该程序成为“一次编译，到处部署”的类型，其中“到处”指的是任何存在漏洞的随机 Linux x86-64 发行版。 以非特权用户在存在漏洞的系统上运行该程序，将打开一个 root shell。 makefile 还会创建一个名为 cfail.sh 的“引导” shell...

CVE-2026-31431

CVE-2026-31431 Binario estándar de CopyFail Obtén todas las alertas de nuevos CVE en https://exploitroom.com root@kitploit: mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, fo...

Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash

Este repositorio no tiene un README...

Linux Distros Unpatched Vulnerability : CVE-2026-89438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU...

Linux Distros Unpatched Vulnerability : CVE-2026-81016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a...

Linux Distros Unpatched Vulnerability : CVE-2026-89443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate level in perf mask ioctls isstifgetperflevelmask and isstifgetbasefreqmask use the user-provided level as an index into perflevels...

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

Linux Distros Unpatched Vulnerability : CVE-2026-86315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to...

The vulnerability of the efi_crash_gracefully_on_page_fault() function in the arch/x86/platform/efi/quirks.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the efecrashgracefullyonpagefault function in the arch/x86/platform/efi/quirks.c module of the Linux operating system’s kernel support for x86 platforms is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an...

The vulnerability of the set_new_password() function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c driver for X86 Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

FTP Fetch

Fetch and execute a x86 payload from an FTP server. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP include...

FTP Fetch, Bind IPv6 TCP Stager with UUID Support (Linux x86)

Fetch and execute a x86 payload from an FTP server. Listen for an IPv6 connection with UUID Support Linux x86 Module Options...

MAL-2026-4719 Malicious code in weavedb-exm-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3992f423f88c69e8c00223cc0ef81f970b8e178f1854beb00ef443586302ad89 package.json declares "preinstall": "./bin/install-deps", which runs a 976KB UPX-packed Linux x86 ELF binary on every npm install. The package...

Malicious code in weavedb-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f22636b5e4726978e23b10a4311fb7e65c2b10003da72429348fa617884d1 package.json declares "preinstall": "./vendor/setup", which runs a 976KB packed Linux x86 ELF binary sha256...

MAL-2026-4652 Malicious code in python-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b94c01fae325c5f5e92abd5da03527c54e22bb48202b1dc8b3e2c64947753b2 package.json declares "preinstall": "./dist/typecheck.js". The referenced file is not JavaScript — it is a 5,224,556-byte Linux x86 ELF executable...

VulnCheck KEV: CVE-2025-8868

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token...