pack2theroot-lab

Pack2TheRoot Lab — CVE-2026-41651 A Dockerised, CTF-style local-privilege-escalation lab built around the Pack2TheRoot advisory CVE-2026-41651, a 12-year-old flaw in the PackageKit daemon disclosed by Deutsche Telekom's Red Team on 22 April 2026. The lab includes three containers : a...

CVE-2026-31431

CVE-2026-31431 Proof of Concept PoC This repository contains a Proof of Concept PoC exploit for CVE-2026-31431 , demonstrating a local privilege escalation vulnerability. !WARNING This project is intended strictly for educational and security research purposes only. Use it only on systems you own...

CVE-2026-3888-snap-confine-systemd-tmpfiles-LPE

CVE-2026-3888 — snap-confine / systemd-tmpfiles Local Privilege Escalation Local privilege escalation from unprivileged user to full root on Ubuntu Desktop 24.04+ by exploiting a TOCTOU race condition between snap-confine and systemd-tmpfiles. Two variants are provided: SUID and Capabilities. CVS...

copy-fail-CVE-2026-31431-detection-probe

Linux Kernel LPE Probe Suite — Copy Fail & Dirty Frag Safe detection tooling for two related Linux kernel local privilege escalation vulnerability families — Copy Fail CVE-2026-31431 and Dirty Frag CVE-2026-43284 / CVE-2026-43500 — both affecting all major distributions since 2017, both exploitab...

Dirty-Frag-Analysis

Dirty Frag Deep Technical Analysis CVE-2026-43284 xfrm-ESP / CVE-2026-43500 RxRPC Linux kernel local privilege escalation vulnerability — PoC reverse engineering · Shellcode breakdown · Patch principles · Detection script Vulnerability Overview Dirty Frag exploits two independent vulnerabilities,...

throttlestop-exploit-rw

Physical Memory Mapper Research tool demonstrating physical memory access through virtual-to-physical address translation combined with vulnerable driver exploitation. Overview This project explores low-level Windows memory management by combining the superfetch technique for address translation...

ovswrap-poc

ovswrap-poc CVE-2026-64531 OVSwrap PoC - Linux kernel Open vSwitch LPE; for patch validation and security research...

CVE-2021-27965

CVE-2021-27965 Simple PoC for exploiting CVE-2021-27965 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-27965 An issue was discovered in signed MICSYS windows driver MsIo64.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine suffers from...

page-cache-corruption-lpes

Page Cache Corruption LPEs 3 Linux kernel local privilege escalation exploits. Same bug class as Dirty COW and Dirty Pipe. Root shell in seconds. Every major distro affected. All three corrupt the kernel's page cache — the in-memory copy of files that processes actually read and execute. The...

CVE-2016-7255

CVE-2016-7255 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted...

Exploit for Use After Free in Linux Linux_Kernel

A12 GhostLock — one-click root for the Samsung Galaxy A12 !C...

Exploit for CVE-2026-98260

O3 Root !verifyhttps://github.com/zsw125/o3root/actions/w...

Detection-and-Mitigation-for-CVE-2022-1679

Detection-and-Mitigation-for-CVE-2022-1679 The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw...

CVE-2021-4034-POC

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

bazad5

bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...

pwnkit-vulnerability

PWNKIT Vulnerability - CVE-2021-4034 CVE-2021-4034 PWNKIT A memory corruption vulnerability in Polkit's pkexec, which allows any unprivileged user to gain full root privileges on a vulnerable system using default polkit configuration. Easy to use, local privilege escalation on any non-patched lin...

CVE-2017-5487

CVE-2017-5487 is a vulnerability in the Linux kernel that was discovered and disclosed in 2017. The vulnerability allows a local attacker to gain root access to a system by exploiting a race condition in the key management subsystem of the kernel. The vulnerability can be exploited by a user with...

CVE-2021-4034

CVE-2021-4034 pkexec Local Privilege Escalation exploit...

CVE-2021-4034

CVE-2021-4034 - Docker Container Deliberately Vulnerable Version Docker PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2022-1015

CVE-2022-1015 id uid=1000d gid=1000d groups=1000d ./poc + unshare done table created: leaktable chain created: leakchain rule added Listening on port 9999 table created: leaktable chain created: leakchain rule added Listening on port 9999 kerneladdress: ffffffffb4a00000 kernelstack:...