SUID3NUM

SUID3NUM Python2/3のスタンドアロンスクリプトです。Pythonの組み込みモジュールを利用して、SUIDバイナリを検出し、デフォルトのバイナリとカスタムバイナリを分離し、それらをGTFO Binのリポジトリとクロスマッチングし、さらには自動で悪用まで行います！すべてカラー表示！ ͡ʘ ͜ʖ ͡ʘ 説明 Python2とPython3の両方をサポートするスタンドアロンスクリプトで、マシン/CTF内のすべてのSUIDバイナリを検出し、以下の処理を行います。 すべてのデフォルトSUIDバイナリ（Linuxに標準で付属し、悪用不可能なもの）を一覧表示...

CVE-2026-31431-Patch

CVE-2026-31431（Copy Fail）緩和・パッチスクリプト パッチ適用前の脆弱な状態の画像 スクリプトによるパッチ適用後の画像 このリポジトリには、CVE-2026-31431 （別名 「Copy Fail」 ）を緩和・パッチするために設計された専用のbashスクリプトが含まれています。この脆弱性はLinuxカーネルにおける重大なローカル権限昇格（LPE）であり、権限のないユーザーがAFALG（Crypto API）およびspliceシステムコールを介してPage Cacheを汚染することにより、rootアクセスを取得できるものです。 脆弱性の概要 CVE-2026-314...

CVE-2026-54526 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

FreeBSD : FreeBSD -- Local privilege escalation via execve(2) TOCTOU race (4b0d0a49-74e1-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4b0d0a49-74e1-11f1-958d-bc241121aa0a advisory. During execve2 of a SUID binary, the new virtual address space is installed before the process...

PT-2026-55227

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description A race condition exists in the execve system call during the execution of a SUID binary. The kernel installs the new virtual address space before updating the process credentials. This create...

FreeBSD -- Local privilege escalation via execve(2) TOCTOU race

Problem Description: During execve2 of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process's memory via procfs or linprocfs, because the kernel's debugging...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

pagecache-guard 中文文档 A runtime integr...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 Copy Fail Vulnerability Detection Script !L...

Exploit for CVE-2026-31431

copy-fail-go Go port of grenkocahttps://gist.github.com/gr...

sigma_rule_for_copyfail

Copy Fail Detection — CVE-2026-31431 Detection engineering pr...

CVE-2026-29127

The CVE-2026-29127 affects the IDC SFX2100 Satellite Receiver, where the monitor user’s home directory is configured with overly permissive permissions (0777). This enables local privilege escalation because highly privileged processes and binaries in that directory could be exploited by any loca...

CVE-2026-29127 Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100

The IDC SFX2100 Satellite Receiver sets overly permissive file system permissions on the monitor user's home directory. The directory is configured with permissions 0777, granting read, write, and execute access to all local users on the system, which may cause local privilege escalation dependin...

CVE-2026-29124

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting IDC SFX2100 Satellite Receiver, which may lead to local privlidge escalation from t...

CVE-2026-29124 Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting IDC SFX2100 Satellite Receiver, which may lead to local privlidge escalation from t...

CVE-2026-29124

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting IDC SFX2100 Satellite Receiver, which may lead to local privlidge escalation from t...

CVE-2026-29124 Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting IDC SFX2100 Satellite Receiver, which may lead to local privlidge escalation from t...

CVE-2026-29124

The CVE-2026-29124 entry affects International Data Casting (IDC) SFX2100 Satellite Receiver. It reports multiple SUID root-owned binaries located under /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 that ma...

CVE-2026-29124: Improper Privilege Management

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting IDC SFX2100 Satellite Receiver, which may lead to local privlidge escalation from t...

exploit-notes

🎯 Pentest Playbook Index Welcome to the comprehensive penetra...

VulnCheck KEV: CVE-2018-14634

Linux Kernel contains an integer overflow vulnerability in the createelftables function which could allow an unprivileged local user with access to SUID or otherwise privileged binary to escalate their privileges on the system...