121263 matches found
CVE-2017-16943
CVE-2017-16943 Configuración del entorno root@kitploit: git clone https://github.com/Exim/exim.git git checkout 01c594601670c7e48e676d6c6d32d0f0084067fa cd ./exim/src mkdir Local wget "https://bugs.exim.org/attachment.cgi?id=1051" -O Makefile Modifique las variables de ruta y el nombre de usuario...
CVE-2026-46215-EXPLOIT
CVE-2026-46215 Exploit para Linux 7.0 c0d3 por : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity Este exploit funciona en un entorno limitado, ¡¡¡revisa algunos requisitos a continuación!!! ¿QUÉ DEMONIOS ES ESTO? Este es un exploit para...
root-sonim-xp3800
Root Sonim XP3800 Acceso root para el Sonim XP3800. Hay dos métodos disponibles: elige el que mejor se adapte a tu situación. Aplicación de administración root La aplicación de administración root explota CVE-2019-2215 una vulnerabilidad de kernel use-after-free en binder para obtener root...
CVE-2026-22009-Linux-eBPF-Map-Locking-Race-Use-After-Free
CVE-2026-22009 – Linux eBPF Map Locking Race → Use‑After‑Free Program Code C simulation root@kitploit: // ebpfmapuaf.c - Simulated concurrent map update/free include include include include void mapdata = NULL; int mapfreed = 0; void updatemapvoid arg // Simulate eBPF program updating map if...
Tor-0day-JavaScript-Exploit
CVE-2024-9680 - Exploit 0day del Navegador TOR UAF Use-After-Free en Líneas de Tiempo de Animación - Vulnerabilidad de Ejecución Remota de Código Explotado activamente en la naturaleza dirigido a usuarios del Navegador Tor Ver Análisis • CVE Oficial Resumen Este repositorio contiene un análisis...
chronomaly
Chronomaly Chronomaly is a kernel exploit for the Android / Linux kernel using CVE-2025-38352. The exploit was written specifically for Linux kernel v5.10.157, but should work against all vulnerable v5.10.x kernels, as it does not require any specific kernel text offsets to work. I covered the...
CVE-2025-8045
CVE-2025-8045 — Arm Mali GPU KCPU Queue UAF A local privilege escalation exploit for CVE-2025-8045 , a use-after-free in the Arm Mali GPU kernel driver kbase. A non-privileged local process races the CSF KCPU queue dump path to free and reclaim a cpuqueue.buffer, turns the dangling allocation int...
CVE-2026-43499-S24U
CVE-2026-43499 PoC for Galaxy S24 Ultra SM-S928U1 Device-specific research port of CVE-2026-43499 for the US Samsung Galaxy S24 Ultra on firmware S928USQS6DZF2 app-domain / production path. This repository is the S24U counterpart of CVE-2026-43499-S25U. It captures the current incomplete progress...
Zapscape
The KVM Escape Trilogy ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Zapscape CVE-2026-64561 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape...
CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions
CVE-2026-28992: IOHIDFamily FastPathUserClient Race Conditions CVE-2026-28992 | Author: Johnny Franks @zeroxjf Component: IOHIDFamily Impact: An attacker may be able to cause unexpected app termination Description: A memory corruption vulnerability was addressed with improved locking. —Apple...
CVE-2022-41218
Introduction This vulnerability is a race condition vulnerability that occurs in drivers/media/dvb-core/dmxdev.c. Therefore, a race condition may occur in the usb device driver using this dmxdev. This vulnerability could be used to trigger 3 UAFs. Vulnerability 1. vmalloc UAF write First, the...
CVE-2025-43529
CVE-2025-43529 Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore. This repository contains a carefully structured root cause analysis slides for this vulnerability, intentionally organized as a tiered explanation to guide...
NotSecDrv
NotSecDrv - A PoC code for CVE-2018-7249 General Description An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race...
CVE-2025-43529
CVE-2025-43529 TL; DR Apple recently shipped iOS 26.2 and iPadOS 26.2, along with a security advisory that includes fixes for WebKit vulnerabilities. One bug in the DFG JIT compiler CVE-2025-43529 stood out, so I decided to dig into it. The JIT compiler correctly recognized that a Phi node where...
uaf-exploit-cve-2026-23415
CVE-2026-23415 PoC Prueba de concepto para CVE-2026-23415 , una vulnerabilidad de use-after-free en el subsistema futex del kernel de Linux. Acerca de la vulnerabilidad Existe una condición de carrera entre futexkeytonodeopt y vmareplacepolicy. Mientras el código de futex lee la política de memor...
CVE-2026-64560-Analysis
CVE-2026-64560 — Linux Kernel posix-cpu-timers non-leader exec race UAF Reproducer / PoC trigger verification : Linux & Android NDK This repository is intended solely for verifying patch status and for research/learning on your own test devices. It does not contain any privilege...
CVE-2026-46215-exploit-linux-7.0-uaf-stable
CVE-2026-46215 Exploit for Linux 7.0 - More Stable & Reliable c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity This exploit works in a limited environment, check some requirements below !!! WHAT THE HELL IS THIS ? This is and exploit for...
CVE-2023-20938
CVE-2023-20938 English Análisis de vulnerabilidad 1. El cliente A y el cliente B establecen una conexión Binder a través del administrador de contexto servicemanager. 2. A crea el nodo 0xbeef node = bindernewnodeproc, fp;, B lo referencia mediante ref-targetnode nodo 0xbeef 3. B primero procesa...
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Ejecución remota de código mediante Use-After-Free en JScript.dll CVE-2025-30397 🧠 Descripción Este repositorio contiene un exploit de prueba de concepto PoC para una vulnerabilidad de Use-After-Free en el motor JScript jscript.dll q...