CVE-2026-52727

lxc-ci , the continuous integration and image-build scripts for LXC , shipped Arch Linux images (built from images/archlinux.yaml) that retained a shared pacman local-signing private key in /etc/pacman.d/gnupg. Every container or VM created from those images inherited the same key. An attacker wh...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 Mitigation Toolkit Defensive remediation, auditing, and verification toolkit for CVE-2026-54420 affecting LiteSpeed cPanel Plugin in shared hosting environments using CloudLinux / CageFS. ⚠️ Security Notice This repository is intended for system administrators, hosting providers, an...

AZL-103017 CVE-2026-90186 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nullblk: reject per-device queue resize for shared tag set When sharedtags is enabled, nullsetuptagset makes the device use the global tagset, whose driverdata stays NULL. nullmapqueues therefore falls back to the module-wide...

DEBIAN-CVE-2026-90191

In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI return value controls how many bytes are copied from shared memory into the RPMI notification buffer. It is not validated against the negotiated shared-memory si...

CVE-2026-21986-VirtualBox-DoS

CVE-2026-21986 - Истощение памяти ядра в общих папках VirtualBox DoS Обзор В этом репозитории содержатся proof of concept PoC и технический отчёт по уязвимости CVE-2026-21986 — уязвимости типа «отказ в обслуживании» denial of service в Oracle VM VirtualBox. Проблема присутствует в интерфейсе...

trust-boundary-ctf

🐘 Trust Boundary: MCP Session Isolation CTF The console reads Session Active. Every tool call succeeds. The admin OAuth token is in every response. Trust Boundary is a browser-based CTF lab built around a real session isolation failure in a locally-running MCP server. The vulnerability is not...

CVE-2026-90191 mailbox: riscv-sbi-mpxy: validate RPMI notification lengths

In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI return value controls how many bytes are copied from shared memory into the RPMI notification buffer. It is not validated against the negotiated shared-memory si...

EUVD-2026-81784

In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI return value controls how many bytes are copied from shared memory into the RPMI notification buffer. It is not validated against the negotiated shared-memory si...

CVE-2026-90191 mailbox: riscv-sbi-mpxy: validate RPMI notification lengths

In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI return value controls how many bytes are copied from shared memory into the RPMI notification buffer. It is not validated against the negotiated shared-memory si...

EUVD-2026-81779

In the Linux kernel, the following vulnerability has been resolved: nullblk: reject per-device queue resize for shared tag set When sharedtags is enabled, nullsetuptagset makes the device use the global tagset, whose driverdata stays NULL. nullmapqueues therefore falls back to the module-wide...

CVE-2026-90186

CVE-2026-90186 affects the Linux kernel null_blk driver. When the module is loaded with shared_tags enabled, a per-device resize of submit_queues or poll_queues via configfs calls blk_mq_update_nr_hw_queues() on the shared tag set, shrinking hardware queue contexts. The resulting NULL hardware co...

CVE-2026-90186 null_blk: reject per-device queue resize for shared tag set

In the Linux kernel, the following vulnerability has been resolved: nullblk: reject per-device queue resize for shared tag set When sharedtags is enabled, nullsetuptagset makes the device use the global tagset, whose driverdata stays NULL. nullmapqueues therefore falls back to the module-wide...

CVE-2025-32463-Sudo-Privilege-Escalation

CVE-2025-32463-Sudo-Privilege-Escalation ✔️ Completed on HackViser VIP Challenge This repository contains a working exploit for CVE-2025-32463 , a critical vulnerability CVSS 9.3 affecting sudo versions 1.9.14 → 1.9.17 that allows local privilege escalation to ROOT by abusing the --chroot -R...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 Mitigation Toolkit Defensive remediation, auditing, and verification toolkit for CVE-2026-54420 affecting LiteSpeed cPanel Plugin in shared hosting environments using CloudLinux / CageFS. ⚠️ Security Notice This repository is intended for system administrators, hosting providers, an...

Shadow-Vault

Shadow Vault 🔐 Shadow Vault — это легковесный PHP-инструмент, предназначенный для системных администраторов , позволяющий безопасно добавлять новые учётные данные пользователей в файлы shadow на серверах общего хостинга. Он автоматически определяет существующий формат срока действия shadow-записе...

CVE-2021-4034

CVE-2021-4034 PoC и патчинг уязвимости CVE-2021-4034 в Polkit's Pkexec Подтверждено на полностью пропатченном Ubuntu 21.10 PoC Патчинг https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034...

CVE-2021-4034

Python3-код для эксплуатации CVE-2021-4034 PWNKIT. Это было упражнение в духе «могу ли я заставить это работать на Python?», а не попытка создать надёжный эксплойт. У меня это работает, но, вероятно, есть баги. Полезная нагрузка по умолчанию запускает оболочку от имени root, сгенерированную с...

f_poc_cve-2021-4034

fpoccve-2021-4034 использование root@kitploit: cd /tmp git clone https://github.com/jcatala/fpoccve-2021-4034/ cd fpoccve-2021-4034 gcc -fPIC -c ISO646.c ld -shared -shared ISO646.o -o s.so gcc f.c -o f ./f...

CVE-2021-4034

CVE-2021-4034 Предкомпилированные сборки для CVE-2021-4034. Конечно, вам не стоит доверять предкомпилированным сборкам : Этот релиз работает немного иначе: сначала создаётся минимальный разделяемый объект. Этот объект упаковывается в основной бинарный файл и сбрасывается при выполнении. Для...

CVE-2021-4034

CVE-2021-4034 Это эксплойт, созданный для CVE-2021-4034, предназначенный как POC. Он основан на информации с https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt. Как использовать: Скачайте папку с эксплойтом. Скомпилируйте prog.c с помощью gcc prog.c Перейдите в папку GCONVPATH=. и...