d-os-descriptor

d-os-descriptor Summary The USB Gadget Subsystem includes security issues in the OS descriptor handling section of compositesetup function composite.c. Processing of properly crafted control transfer request messages result in device crash due to null pointer dereference or memory corruption...

GTScan

GTScan The Nmap Scanner for Telco. With the current focus on telecom security, there used tools in day to day IT side penetration testing should be extended to telecom as well. From here came the motivation for an nmap-like scanner but for telco The current security interconnect security controls...

libput_user_exploit

ATTENTION !!! This exploit writes more 3 bytes with zero. But it is enough to install ptmx.fsync handler and modify ueventhelper string...

SECURITY-218

This mitigation is obsolete as of Jenkins 2.54 and Jenkins LTS 2.46.2. If you have installed a 2.54+/LTS 2.46.2+ version of Jenkins anew, the Remoting-based CLI is disabled out of the box. If you installed an older version of Jenkins and upgraded to 2.54+ or LTS 2.46.2+, you will be prompted by a...

CVE-2023-21817

CVE-2023-21817 - Windows Kerberos LPE Vulnerability Checker A minimalist C++ Proof of Concept PoC / Vulnerability Checker for CVE-2023-21817. This utility helps security researchers and system administrators determine whether a Windows system is vulnerable to the Kerberos Local Privilege Escalati...

CVE-2026-98406

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can trigger a denial of service DoS condition by issuing a wireless bitrate configuration request while a network interface is undergoing initialization or teardown. Because the subsystem fails to verify that the...

CVE-2026-98401

A flaw was found in the Linux kernel's networking subsystem. When processing encapsulated network packets, the kernel fails to reset the transport header offset after stripping outer packet headers during tunnel decapsulation. A remote attacker could exploit this vulnerability by sending speciall...

CVE-2026-99999

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2025-21756

CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...

copy-fail

CopyFail Mitigation CVE-2026-31431 - Multi-Distribution Guide This repository contains detailed tutorials and scripts to mitigate the CopyFail vulnerability CVE-2026-31431. This flaw affects the Linux Kernel cryptography subsystem AFALG and allows local privilege escalation LPE from a regular use...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local Privilege Escalation CISA KEV | CVSS 7.8 HIGH | Affects Linux kernels 4.14 – early 2026 9 years Table of Contents 1. Executive Summary 2. Risk Assessment 3. Technical Deep Dive 4. Attack Methodology — Red Team 5. Detection & Incident...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — Copy Fail Severity: Critical CVSS v3.1: 9.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Status: Public Exploit Available Summary CVE-2026-31431 "Copy Fail" is a local privilege escalation vulnerability in the Linux kernel cryptographic subsystem. Any unprivileged user can escalate to roo...

CopyFail-Exploits-CVE-2026-31431

CVE-2026-31431 — Copy Fail Educational repository with multi-language implementations of the Copy Fail exploit. Created and maintained by @shotafry — because reading the CVE is not enough. You have to reproduce it. 📖 Leer en Español Table of Contents What is Copy Fail? Who discovered it? Severity...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail is a logic bug in the Linux kernel's crypto subsystem CVE-2026-31431. A 2017 optimization in algifaead.c accidentally placed page cache pages into a writable scatterlist. The authencesn AEAD algorithm writes 4 scratch bytes past the output boundary during...

cve-2024-23113-poc

CVE-2024-23113-poc CVE-2024-23113 is a vulnerability discovered in the Linux Kernel , classified as an arbitrary code execution vulnerability that affects the bpf Berkeley Packet Filter subsystem. Specifically, this vulnerability affects objects of the bpfprog type in bpf programs, and can allow ...

poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example CVE-2026-31431 Title crypto: algifaead - Revert to operatin...

audit-kernel

Linux Kernel Audit Subsystem https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel The Linux Audit subsystem provides a secure logging framework that is used to capture and record security relevant events. It consists of a kernel component...

DirtyFrag-go

dirtyfrag-go Two bugs. One shell. No disk writes. Go port of dirtyfrag CVE-2026-43284 / CVE-2026-43500. How it works tl;dr The bug class is in the Linux kernel XFRM subsystem. When a file page is spliced into a pipe and then into an ESP-encrypted socket, the kernel decrypts the ESP payload in-pla...

USN-8922-2: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

CVE-2026-98421

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can cause a denial of service DoS by requesting a Tunneled Direct Link Setup TDLS setup confirmation for a nonexistent peer station. Because the subsystem does not verify that the peer station exists before...