blackarch

Table of Contents Description Overview Download and Installation Key Features Installation Instruction Usage Get Involved Contributing Contact License Disclaimer Conclusion Description BlackArch Linux is an Arch Linux–based penetration testing distribution for penetration testers and security...

CVE-2022-0847

CVE-2022-0847 Original link https://dirtypipe.cm4all.com/ Usage gcc exploit.cpp -o exploit ./exploitIt will spawn a root shell Vulnerability description This is CVE-2022-0847, a vulnerability in the Linux kernel since version 5.8 that allows overwriting data in arbitrary read-only files. This lea...

Heartexploit

Heartexploit Here is my new first exploit, this exploit attacks the HeartBleed vulnerability CVE-2014-0160, I hope you like it. This exploit only works on linux since part of it is made in languages not compatible with windows. The only command needed to start this application is: ./Heartexploit....

CVE-2020-8423

CVE-2020-8423 Research based on https://ktln2.org/2020/03/29/exploiting-mips-router/testing-environment hook.c is customized especially open vmlinux version 2.6.31...

CVE-2009-2692

CVE-2009-2692 Linux Null pointer dereference This is just the compiled binary of the code available in https://www.exploit-db.com/exploits/9545/ Compiled for education purposes It was compiled under CentOS 4.8...

kernel-c-to-rust-spike

Kernel C-to-Rust hardening spike: UVC descriptor parser Can a security-critical Linux kernel C parser be hardened by rewriting it in Rust, with the rewrite shown equivalent to the original and then formally verified? This spike runs the full loop on one target: the UVC video descriptor parser...

dirtycow-lab

Dirty COW Educational PoC CVE-2016-5195 ⚠️ Legal Warning This code is for EDUCATIONAL PURPOSES ONLY. Any malicious use is strictly prohibited and illegal. 📖 What is Dirty COW? Dirty COW CVE-2016-5195 is a privilege escalation vulnerability in the Linux Kernel that exploits a race condition in the...

CVE-2024-6387

0.Summary This is essentially a statistical vulnerability: it requires a large number of attempts to win the race condition and successfully execute arbitrary code, and the attacker needs to overcome many obstacles," Schwartz told SecurityWeek. "Even in the best case, the most famous vulnerabilit...

kali-linux-docker

Official Kali Linux Docker This Kali Linux Docker image provides a minimal base install of the latest version of the Kali Linux Rolling Distribution. There are no tools added to this image, so you will need to install them yourself. For details about Kali Linux metapackages, check...

cve-2022-0847dirtypipe-exploit

cve-2022-0847dirtypipe-exploit...

kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound

A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...

kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation

A flaw was found in the Linux kernel's DisplayPort DP Multi-Stream Transport MST subsystem. This vulnerability involves multiple buffer overflows within the drmdpsidebandappendpayload function when handling data from connected devices. A physically connected, malicious DP MST device can exploit...

kernel: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise

A flaw was found in the Linux kernel's drm/xe/uapi component. This vulnerability allows a Graphics Processing Unit GPU using cohnone coherency mode to bypass CPU caches and read stale sensitive data directly from Dynamic Random-Access Memory DRAM. This can lead to information disclosure, where da...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: openvswitch: fix GSO userspace truncation underflow

A flaw was found in the Open vSwitch component of the Linux kernel. This vulnerability arises from an underflow condition when handling Generic Segmentation Offload GSO packets in userspace. A length calculation error can lead to a buffer underflow when data is processed by the skbzerocopy...

kernel: media: cx231xx: reject geometry changes while the VBI queue is busy

A flaw was found in the Linux kernel's cx231xx media driver. A local attacker can exploit this vulnerability by manipulating video and Vertical Blanking Interval VBI queue operations. This allows for a heap out-of-bounds write, which could lead to arbitrary code execution or a denial of service...

kernel: bpf: Support for hardening against JIT spraying

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF Just-In-Time JIT compiler. The BPF JIT allocator reuses memory space, and when new code is written, an indirect jump into the new program can reuse a branch prediction left behind by an old program. This could allow an attacker to...

kernel: cifs: validate DFS referral string offsets

A flaw was found in the Linux kernel's CIFS component. A remote attacker could exploit this vulnerability by providing a specially crafted Distributed File System DFS referral. The system fails to properly validate string offsets within these referrals, which can lead to an out-of-bounds read. Th...

kernel: nvmet-auth: Synchronize timeout work during SQ teardown

A flaw was found in the nvmet-auth component of the Linux kernel. A timing issue during the cleanup of a Submission Queue SQ can lead to a use-after-free vulnerability. This occurs when a delayed authentication task attempts to access memory that has already been released or repurposed. An attack...

kernel: drm/amd/display: set new_stream to NULL after release

A flaw was found in the Linux kernel's drm/amd/display component. Specifically, within the dmupdatecrtcstate function, a stream pointer is released but not subsequently set to NULL. This can lead to a double release of the same pointer if an error occurs later in the process, creating a...