48548 matches found
CVE-2026-34990-poc
CVE-2026-34990 — CUPS Local-Printer PoC Authorized testing / research use only. Run this PoC only against systems you own or are explicitly authorized to test. This repository contains a system-CUPS-oriented reproduction of the local-printer vulnerability in CUPS 2.4.16. The implementation was...
CVE-2025-6019-exploit
CVE-2025-6019: Privilege Escalation Exploit via UDisks2 Filesystem Resize Vulnerability Details CVE ID : CVE-2025-6019 Impact : Local Privilege Escalation LPE Affected Systems : Linux systems with vulnerable udisks2 versions Mechanism : Race condition during filesystem resize allows access to SUI...
CVE-2026-23918-Apache-H2-PoC
CVE-2026-23918-Apache-H2-PoC This is a proof-of-concept exploit for the double-free vulnerability in Apache's modhttp2 CVE-2026-23918. It's a nasty bug that hits the h2mplx.c stream cleanup path. Basically, if you time it right, you can get the server to try and clean up the same stream twice,...
cve-2026-32746-mitigation
CVE-2026-32746: Advanced Linux Networking Mitigation Tool 🚨 TECHNICAL DISCLAIMER CVE-2026-32746 is a hypothetical vulnerability used for educational demonstrations. This tool addresses the "Perfect Storm" scenario: A memory-unsafe Telnet daemon telnetd combined with a race condition in privilege...
CVE-2024-6387
OpenSSH CVE-2024-6387 Mitigation Script This repository contains a Python script designed to help network administrators scan and secure SSH configurations against the CVE-2024-6387 vulnerability found in OpenSSH's signal handling mechanism. This vulnerability, if exploited, can allow unauthorize...
cve-2025-5054
CVE-2025-5054 Vulnerability Detection Tool A Python tool to check if your Ubuntu system is vulnerable to CVE-2025-5054, a race condition in Apport that allows local information disclosure. This tool performs a series of checks to determine your system's status and provides recommendations if you...
CVE-2024-6387-Exploit-POC
CVE-2024-6387-Exploit-POC This repository contains a Proof of Concept POC to exploit the vulnerability CVE-2024-6387 in SSH servers running vulnerable versions of OpenSSH. What is a POC? A POC, or Proof of Concept, is a program or script that demonstrates the exploitation of a security...
CVE-2026-68138
CVE-2026-68138: Linux qdisc rate-table race to local root This repository contains a proof-of-concept local privilege-escalation exploit for CVE-2026-68138 , a race in the Linux traffic-control rate-table code. In the tested QEMU environment, the PoC escalates from an ordinary process with outer...
regreSSHion
regreSSHion Exploit PoC Description This repository contains an exploit targeting CVE-2024-6387 regreSSHion, a vulnerability in OpenSSH's server sshd on glibc-based Linux systems. It exploits a race condition in the signal handler of OpenSSH, potentially leading to remote code execution as root...
CVE-2024-30088-
Weakness: CWE-367: Time-of-check Time-of-use TOCTOU Race Condition CVSS Source: Microsoft CVSS: 3.1 7.0 / 6.3...
CVE-2022-2602-Kernel-Exploit
CVE-2022-2602-Kernel-Exploit Details https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-iouring-uaf/ TL;DR The vulnerability is an Use-After-Free that impacts the registered file descriptor functionality in the iouring subsystem. It's...
CVE-2024-6387
转载原文 CVE-2024-6387 - PoC 📜 Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server A signal handler race condition was found in OpenSSH's...
triton-cve-2025-23320
Demonstrating CVE-2025-23320 This repo replicates CVE-2025-23320, demonstrating CWE-209, Generation of Error Message Containing Sensitive InformationCVSS Score: 7.5. This vulnerability exists on all NVIDIA Triton inference servers 25.06 and before. This docker setup runs a network containing an...
cve-2024-6387-poc
cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...
root-dirtyc0w
root-dirtyc0w CVE-2016-5195 DirtyCow root privilege escalation Dirty COW was a race-condition vulnerability in the Linux kernel. This vulnerability lived inside the kernel functions which handle the copy-on-write COW feature of memory mappings and when exploited allowed processes to write to...
bad-epoll
Bad Epoll: The bug missed by Mythos An unprivileged process escalating to root on Google kernelCTF. Bad Epoll CVE-2026-46242 is a race-condition use-after-free in the Linux kernel's epoll subsystem. This bug lets an unprivileged process become root, not only on Linux desktops and servers but also...
CVE-2026-46333
🚀 CVE-2026-46333 - ssh-keysign-pwn High-quality Proof of Concept for the Linux kernel race condition vulnerability A clean and reliable proof-of-concept exploit for CVE-2026-46333 — Local information disclosure via race condition in the Linux kernel's process exit path. 🖼️ Screenshot Successfully...
CVE-2024-6387
CVE-2024-6387 CVE-2024-6387 POC Currently being edited openssh CVE-2024-6387 - PoC 📜 Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server ...
SNEK_Equinox
SNEK Equinox I would like to thank Nightmare-Eclipse for the inspiration not personal from the project UnDefend - https://web.archive.org/web/20260521145157/https://github.com/Nightmare-Eclipse/UnDefend: Now funnily enough, I found a way to lie to the EDR web console to show that defender is up a...
cve-2026-41940-cpanel_authbypass_reproduction
CVE-2026-41940 — cPanel & WHM Authentication Bypass CVSS v3.1: 9.8 Critical Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM that allows unauthenticated attackers to gain full administrative access to the control panel. The vulnerability was exploited in t...