CVE-2019-13272

CVE-2019-13272 Exploit di root locale per Linux Linux 4.10 5.1.17 PTRACETRACEME root locale CVE-2019-13272 In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users...

CVE-2017-5123

CVE-2017-5123 Escalation dei privilegi in Linux che sfrutta la syscall waitid. L'exploit è portato a voi da @XeR0x2A e @chaignc di HexpressoTeam solo a scopo educativo. Il bug è stato introdotto il 2017-05-21 e corretto il 2017-10-09; 4.14.0-rc4+ è noto come vulnerabile. asciicast Se hai un livel...

CVE-2026-31787

XSA-487 / CVE-2026-31787 Doppeltes Freigeben von Kernel-Speicher im Linux-Kernel-Xen-privcmd-Treiber Ein doppeltes Freigeben von Kernel-Speicher im privcmd-Treiber des Linux-Kernels für Xen ermöglicht die Umgehung des Kernel-Lockdowns Secure Boot. Die Ausnutzung erfordert Zugriff mit Root-Rechten...

linux-insides

linux-insides A book-in-progress about the Linux kernel and its insides. Introduction • Chapter status • Requirements • Translations • Contributing • Author Introduction linux-insides is a book-in-progress about the Linux kernel and its insides. The goal of this project is simple - to share...

bad_garbage

BADGARBAGE.c CVE-2026-53361 — una use-after-free non privilegiata e con escape dal container nel garbage collector dei socket AFUNIX. Questa è la versione a vettore singolo solo MSGPEEK. Il Bug Il GC AFUNIX recupera i socket "in-flight" che formano cicli di riferimento irraggiungibili. Una MSGPEE...

CVE-2022-0185

CVE-2022-0185 Questo repository contiene exploit dimostrativi per CVE-2022-0185. Ci sono due versioni qui. La versione non-kctf versione fuse ha come target specifico Ubuntu con versione kernel 5.11.0-44. Non restituisce direttamente una shell di root, ma imposta /bin/bash come suid, portando a u...

dirtcow

dirtcow Riproduzione della vulnerabilità di escalation dei privilegi locali di Linux Dirty Cow CVE-2016-5195 0. Usa il comando uname -a per visualizzare le informazioni sul kernel Linux. 1. Scarica l'exploit sul computer locale/server. 2. Compila dirty.c usando il comando gcc -pthread dirty.c -o...

LARE

LARE L ocale Ab R ootE xploiter è un semplice script bash che ti aiuta a distribuire exploit di root locali dalla tua macchina attaccante quando la tua macchina vittima non ha connettività Internet. Lo script è utile in uno scenario in cui la macchina vittima non ha una connessione Internet ad...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Utilizzo dell'exploit: Primo : carica i file fuse.c e exp.sh nella directory /tmp. Puoi usare scp o python3 -m http.server per caricare il file sul target. scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp /Desktop/CVE-2023-0386/fuse.c...

TowelRoot

Cos'è TowelRoot? Towelroot ottiene l'accesso root sfruttando una vulnerabilità nel kernel di Android, che è basato su Linux ed è un componente molto basilare del dispositivo che fondamentalmente funge da intermediario per far comunicare il sistema operativo con l'hardware fisico...

CVE-2016-0846-PoC

CVE-2016-0846-PoC...

CVE-2022-25636

CVE-2022-25636 Escalation dei privilegi del kernel netfilter toc Panoramica della vulnerabilità ID vulnerabilità: CVE-2022-25636 Prodotto vulnerabile: linux kernel - netfilter Versioni interessate: linux kernel 5.4 Impatto: scrittura heap out-of-bounds nel modulo kernel netfilter, può portare a...

CVE-2026-98241

A flaw was found in the Linux kernel's IPv6 IPsec XFRM networking framework. When handling TCP connection handshakes routed through an IPsec tunnel with a reduced Maximum Transmission Unit MTU, the kernel's local error-handling path incorrectly treats incomplete connection request sockets as full...

CVE-2026-98242

A flaw was found in the Linux kernel's DMA-BUF subsystem. An integer truncation occurs when processing peer-to-peer Direct Memory Access DMA transfers with memory-mapped input/output regions exceeding four gigabytes. A local user could exploit this flaw to cause memory corruption, potentially...

CVE-2026-98313

A flaw was found in the Linux kernel's Qualcomm MSM DisplayPort driver. When display link training fails to initialize the connection, the driver improperly attempts an idle teardown sequence on an unpowered controller. A local user could trigger this condition during display state transitions,...

CVE-2026-98314

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem. A race condition during audio timer registration allows a new timer to become accessible to other processes before its internal data is initialized. A local user can exploit this vulnerability by concurrently...

COMP3320-VAPT

COMP3320-VAPT Dateien, die benötigt werden, um die CVE-2022-0847-Schwachstelle im Linux-Kernel v5.8 zu demonstrieren Kompilierung $ make...

CVE-2026-98240

A flaw was found in the Linux kernel's IP tunnel subsystem. When processing network routes with encapsulation options, the subsystem references tunnel options before their length is initialized. A local user with network configuration privileges can exploit this flaw by adding routes with specifi...

CVE-2026-98312

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA 6fire USB audio driver. When processing incoming audio data, the driver improperly calculates buffer sizes based on device-reported packet lengths without sufficient bounds checking. An attacker capable of connecting a...

GhostLock-OPPO-PCKM00

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — Linux-Kernel-futex-Priority-Inheritance-Use-after-free-PoC zur lokalen Rechteausweitung, portiert auf das OPPO PCKM00 OP4A57, SM6150, Android 11, Kernel 4.14.180-perf+. DISCLAIMER / 免责声明 Dieses Projekt dient ausschließlich...