596 matches found
CVE-2026-31431
Description: Cfail is my implementation in C++ x86-64 Assembly of CVE-2026-31431 aka Copyfail, with no dependecy required at all, included libc. In fact, you obtain am universal executable able to run stand-alone on every Linux x86-64 distribution, thanks to a minimal implementation of the standa...
cve-2011-3026-firefox
cve-2011-3026-firefox Example of exploiting CVE-2011-3026 on Firefox Linux/x86, from our Black Hat 2012 talk: "Exploiting the jemalloc Memory Allocator: Owning Firefox's Heap" Original slide deck available at: https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis Updated slide...
monomorph
════════════════════════════════════╦═══ ╔═╦═╗ ╔═╗ ╔═╗ ╔═╗ ╔═╦═╗ ╔═╗ ╔══╔═╗ ╠═╗ ═╩ ╩ ╩═╚═╝═╩ ╩═╚═╝═╩ ╩ ╩═╚═╝═╩ ╠═╝═╩ ╩═ ════════════════════════════════╩═══════ By Retr0id ═══ MD5-Monomorphic Shellcode Packer ═══ USAGE: python3 monomorph.py inputfile outputfile payloadfile What does it do? It pac...
how-to-bypass-aslr-on-linux-x86_64
Breaking 64 bit aslr on Linux x86-64 In this article, I'll discuss about the application of the technique described by Samuel Groß in his Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass, to bypass ASLR on Linux x8664. To show this I'm gonna solve a...
CVE-2026-31431
CVE-2026-31431 CopyFail standard binary Get all new CVE alert on https://exploitroom.com mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, for GNU/Linux 3.2.0, not stripped...
Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash
This repository does not have a README...
chimera
Chimera Sandbox untrusted code with safe access to the host. Chimera is a userspace sandbox for code you don't fully trust — a natural fit for coding agents that run arbitrary, generated commands on a machine they share with you. It confines what a process can do to the host while still letting i...
Exploit for Privilege Chaining in Canonical Ubuntu_Linux
CVE-2026-3888 - snap-confine - Escalacion de Privilegios a Roo...
Linux Distros Unpatched Vulnerability : CVE-2026-81016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a...
Linux Distros Unpatched Vulnerability : CVE-2026-89438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU...
Linux Distros Unpatched Vulnerability : CVE-2026-89443
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate level in perf mask ioctls isstifgetperflevelmask and isstifgetbasefreqmask use the user-provided level as an index into perflevels...
CVE-2026-86315
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...
CVE-2026-86315
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...
CVE-2026-86315: Numeric Truncation Error
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...
Linux Distros Unpatched Vulnerability : CVE-2026-86315
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to...
Linux x86 Kernel Efi Crash Gracefully On Page Fault
The vulnerability of the efecrashgracefullyonpagefault function in the arch/x86/platform/efi/quirks.c module of the Linux operating system’s kernel support for x86 platforms is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an...
X86 Linux DoS
The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...
Linux x86 Reverse TCP Stager
Position-independent x86 Linux reverse TCP shellcode socket+connect+dup2+/bin/sh from kittysploit import class ModulePayload: """Linux x86 reverse TCP stager connect + dup2 + execve /bin/sh.""" info = "name": "Linux x86 Reverse TCP Stager", "description": "Position-independent x86 Linux reverse T...
FTP Fetch
Fetch and execute a x86 payload from an FTP server. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP include...