GTScan

GTScan The Nmap Scanner for Telco. With the current focus on telecom security, there used tools in day to day IT side penetration testing should be extended to telecom as well. From here came the motivation for an nmap-like scanner but for telco The current security interconnect security controls...

libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution...

CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" Este repositorio es un validador de Bad Epoll para kernels aarch64 basado en un exploit que ya existe para x86. Escalada de privilegios local del kernel de Linux mediante condición de carrera de use-after-free enepoll Campo| Detalle ---|--- CVE| CVE-2026-46242 Apodo|...

CVE-2013-6282

BUILDING: Download the android ndk, e.g: https://dl.google.com/android/repository/android-ndk-r10e-linux-x8664.zip I used android-ndk-10d Unzip it and install ensure ndk-build is in your PATH root@kitploit: $ make root ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk APPPLATFORM=android-16...

uaf-exploit-cve-2026-23415

CVE-2026-23415 PoC Proof of concept for CVE-2026-23415 , a use-after-free vulnerability in the Linux kernel futex subsystem. About the vulnerability A race condition exists between futexkeytonodeopt and vmareplacepolicy. While the futex code reads a virtual memory area's NUMA memory policy, anoth...

CVE-2026-82677

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-82677

CVE-2026-82677 affects valkey-io valkey 9.1.0 , specifically the function moduleTimerHandler in the Module Timer Subsystem (src/module.c). The root cause is a double free that can be triggered remotely, though exploitation requires high privileges and user interaction . The impact is limited to l...

EUVD-2026-68457

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

copy-fail-mcp

Copy Fail MCP 📖 Installation Guide — quick start, manual setup, and troubleshooting CVE-2026-31431 — The worst Linux vulnerability ever discovered. Now controllable via MCP. 732 bytes of Python. No compilation. No race condition. No per-distro offsets. One shot, universal root on every Linux kern...

CVE-2026-82631

A use-after-free vulnerability exists in valkey-io valkey 9.1.0 , specifically in the handleClientsBlockedOnKey function within the Blocked-on-keys Subsystem (src/blocked.c). The flaw can be triggered remotely but requires high privileges and carries high attack complexity , limiting practical ex...

DirtyFrag-go

dirtyfrag-go Dos bugs. Una shell. Sin escrituras en disco. Puerto en Go de dirtyfrag CVE-2026-43284 / CVE-2026-43500. Cómo funciona tl;dr La clase de bug está en el subsistema XFRM del kernel de Linux. Cuando una página de archivo se pasa con splice a un pipe y luego a un socket cifrado con ESP, ...

CVE-2026-80711

A flaw was found in the Linux kernel's power supply subsystem, specifically within the MAX17040 fuel gauge driver. When the MAX17040 fuel gauge operates without a registered charger status supplier, the driver fails to properly handle this missing information. This oversight can result in userspa...

CVE-2026-80662

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. An incorrect definition of the CXLHEADERLOGSIZE led to an out-of-bounds read when processing RAS capability structures. This vulnerability allows a local attacker to read sensitive kernel stack memory, potentially leading ...

CVE-2022-0185

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185. There are two versions here. The non-kctf version fuse version specifically targets Ubuntu with kernel version 5.11.0-44. It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege...

XCP_ng_CVE-2026-43284_tester

Diagnóstico de Dirty Frag para XCP-ng — CVE-2026-43284 Una herramienta de diagnóstico comunitaria para determinar si un host dom0 de XCP-ng está expuesto a CVE-2026-43284 "Dirty Frag", una vulnerabilidad de escalada de privilegios local en el subsistema xfrm-ESP del kernel de Linux. TL;DR — Todas...

linux-4.19.72_CVE-2022-42896

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2017-7472

CVE-2017-7472 The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service memory consumption via a series of KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring calls. Shortcut Vulnerable kernel 4.10.13...

CVE-2026-31635

🩸 CVE-2026-31635 – DirtyDecrypt Linux Kernel Local Privilege Escalation via RXGK Page Cache Corruption "DirtyDecrypt" — Part of the 2026 "Dirty" family exploits 📖 Overview DirtyDecrypt CVE-2026-31635 is a local privilege escalation vulnerability in the Linux kernel's rxrpc subsystem specifically...

CVE-2026-43503

🚨 CVE-2026-43503 — DirtyClone Cuando la Memoria Compartida Deja de Ser Compartida de Forma Segura. Una vulnerabilidad de Escalada de Privilegios Local causada por una propagación incorrecta del SKBFLSHAREDFRAG flag dentro del stack de redes de Linux. 📖 Resumen CVE-2026-43503 , apodado DirtyClone ...

CVE-2025-20352

CVE-2025-20352 SNMP Exposure Check onesixtyone + parser Fast, safe black-box exposure check for Cisco IOS/IOS XE devices related to CVE-2025-20352 SNMP subsystem: 1. Scan your subnets for SNMP using onesixtyone with default communities. 2. Parse sysDescr.0 banners with a small Python script to fl...