CVE-2024-1086

CVE-2024-1086 针对 CVE-2024-1086 的通用本地权限提升概念验证漏洞利用，适用于大多数介于 v5.14 至 v6.6 之间的 Linux 内核，包括 Debian、Ubuntu 和 KernelCTF。在 KernelCTF 镜像中成功率为 99.4%。 https://github.com/Notselwyn/CVE-2024-1086/assets/68616630/a3d43951-94ab-4c09-a14b-07b81f89b3de 博客文章 / 详细分析 漏洞的完整分析——包括背景信息和大量有用的图表——可以在 Flipping Pages 博客文章...

ptrace_scope-CVE-2019-13272-privilege-escalation

CVE-2019-13272 Es una vulnerabilidad para escalar privilegios en linux. Aún, en la mayoría de distros linux no ha sido arreglada. Para ejecutar el exploit, solo es necesario tener instalado gdb. En las releases os dejaré binarios de gdb para algunas arquitecturas. Me he basado en el exploit que...

CVE-2026-64468

CVE-2026-64468 — Use-after-free de por vida del proceso en binderfreetransaction del kernel Linux Este repositorio contiene, para el use-after-free de Binder del kernel Linux corregido por el commit upstream f223d27a546c1e1f48d38fd67760e78f068fe8c4: binderchain64468.c — una prueba de concepto sin...

CVE-2026-100560

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval...

pentest-copilot

Pentest Copilot Un agente de pruebas de penetración de código abierto impulsado por IA. Se conecta a una caja de ataque Kali, ejecuta herramientas de forma autónoma, analiza los resultados e itera. Tú describes el objetivo. Él hace el resto. Diseñado para compromisos del mundo real, máquinas...

CVE-2026-100560

Versions of OpenClaw before 2026.8.1 on macOS and Linux are vulnerable to an authorization bypass due to how

CVE-2026-100560 OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval...

EUVD-2026-87490

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval...

CVE-2026-100560 OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval...

CVE-2022-0847-dirty-pipe-kernel-checker

CVE-2022-0847-dirty-pipe-kernel-checker Script de Python para comprobar si tu kernel es vulnerable a Dirty Pipe CVE-2022-0847 Puedes ejecutar el script directamente en tu sistema y encontrará tu versión del kernel Pero puedes ejecutar el script pasando como argumento una versión del kernel para...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

Pingpon-Exploit

PINGPON 漏洞利用工具 作者：@037 Pingpon 是一款利用 Shodan.io 获取数千个易受攻击的 GPON 家庭路由器，然后利用远程代码执行漏洞 CVE-2018-10562 执行任意 Linux 命令的工具。 免责声明 对于使用此工具造成的任何损害或犯下的任何罪行，本人概不负责。 原始脚本：github.com/f3d0x0/GPON 先决条件 您需要安装 Python 3.x apt-get install python3 您还需要安装 Shodan 和 Request 模块 pip install shodan pip install requests 使用...

cve-2019-0708-exp

cve-2019-0708-exp Exploit de Corea. Creo que te gustará. Ya viene XP. Win7 también viene. ¿Estará Linux lejos?...

CVE-2019-20326

CVE-2019-20326 GNOME gThumb and Linux Mint Pix use the cairoio module for displaying several image formats with the Cairo graphics library. In gThumb versions 3.8.3 and Pix versions 2.4.5, cairoio is vulnerable to a heap buffer overflow via a JPEG image with either a width or height greater than...

CVE-2026-100560: Incorrect Authorization

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval...

Linux Distros Unpatched Vulnerability : CVE-2026-100689

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.62 does not validate the path field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27j...

CVE-2026-68138

CVE-2026-68138: condición de carrera en la tabla de tasas qdisc de Linux para escalar a root local Este repositorio contiene un exploit de prueba de concepto de escalada local de privilegios para CVE-2026-68138 , una condición de carrera en el código de la tabla de tasas del control de tráfico de...

ImgBackdoor

| | | \ | | | | | | | | | | | | | | | | ' \ / | / |/ | |/ / |/ \ / | '| | || | | | | | | | | | | | | | | | | | ||| || ||, |/ ,|||\,|/ /|| / | |/ Versión publicada: v1.0 Estable Autor: Ferdi S Kennedy kennedy69 Distros compatibles: Linux Ubuntu, Kali, Mint, Parrot OS Aviso legal: El autor no...

SUSE CVE-2026-93228

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

SUSE CVE-2026-93798

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reloc root cleanup in mergerelocroots If the root we got has zero root refs in its root item, we are resetting the root's -relocroot without using barriers like we do everywhere else. Sashiko complained about this whil...