CVE-2026-43499

👻 CVE-2026-43499 — GhostLock 15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros GhostLock is a high-severity Use-After-Free UAF vulnerability in the Linux Kernel rtmutex subsystem. The flaw originates from incorrect waiter cleanup during Priority Inheritance PI...

Ledger

Ledger — Operational Change Tracker Aggressor Script Ledger is a Cobalt Strike aggressor script that tracks every operational change made during an engagement. Every service you enable, firewall rule you punch through, account you create, or registry key you touch gets logged with a risk score,...

cve-2021-34527

CVE-2021-34527 CVE-2021-34527 LPE exploit using AddPrinterDriverEx - this is a weaponized version of the LPE that can be used to escalate a DLL to SYSTEM and will also clean up artifacts. The LPE impacts Windows Desktop 7,8,8.1,10,11 & Server 2008,2012,2016,2019. This visual studio project will...

CVE-2026-23918

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream cleanup leading to pre-auth RCE. Affected: httpd 2.4.66 with modhttp2 and multi-threaded MPM event/worker. Fixed in: 2.4.67. Found and reported by Bartlomiej Dmitruk striga.ai and Stanislaw Strzalkowski isec.pl. Writeup:...

Secure-Desktop

Secure-Desktop Secure Desktop is a tool for Windows to open programs in a safe area where keyloggers and Remote Administration Tools cannot access by any conventional means. Software keyloggers work by setting up a Windows hook that tells Windows that whenever the user presses a key or uses their...

CVE-2025-21420-PoC

CVE-2025-21420 PoC Windows Disk Cleanup Tool Elevation of Privilege Vulnerability AFAIK, albeit incomplete, this is the first PoC to this CVE. https://nvd.nist.gov/vuln/detail/CVE-2025-21420 https://vulners.com/cve/CVE-2025-21420 We found a way to DLL sideload with cleanmgr.exe $ cp .\dokan1.dll...

PersistAssist

PersistAssist PersistAssist is a fully modular persistence framework written in C. All persistence techniques contain a cleanup method which will server to remove the persistence aside from the persistence code. This is a WIP so there are many empty classes, the main object of this project...

azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

freeBokuLoader

freeBokuLoader A simple BOF that tries to free the memory region where the User Defined Reflective Loader is stored. As the name implies, it was tested against BokuLoader, but should work with most if not all UDRLs. Usage beacon freeBokuLoader...

CVE-2026-4020

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CVE-2026-98792

A flaw was found in the Linux kernel's netfilter flowtable component. This flaw allows an attacker to cause a denial of service DoS by crashing the operating system. A race condition exists between the connection cleanup worker and hardware offload handlers when background tasks run concurrently...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

woxeshell ⚠️ Authorized use only. Detection on systems...

CVE-2026-98964

In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metadata allocation failure nvmetreqallocp2pmemsgls assigns req-p2pdev only after the data and metadata SGL allocations succeed. If the data allocation succeeds but the metadata allocation fails...

CVE-2026-99044

A use-after-free vulnerability exists in the Linux kernel 's ice driver during dynamic port cleanup. Specifically, the ice_dealloc_dynamic_port() function attempts to access dyn_port->vsi->idx to erase a dynamic port from pf->dyn_ports, but it incorrectly frees the VSI before reading the...

EUVD-2026-108839

In the Linux kernel, the following vulnerability has been resolved: ice: fix use-after-free in dynamic port cleanup icedeallocdynamicport uses dynport-vsi-idx to erase the dynamic port from pf-dynports. However, it frees the VSI before reading the index for the erase, resulting in a use-after-fre...

CVE-2026-99044 ice: fix use-after-free in dynamic port cleanup

In the Linux kernel, the following vulnerability has been resolved: ice: fix use-after-free in dynamic port cleanup icedeallocdynamicport uses dynport-vsi-idx to erase the dynamic port from pf-dynports. However, it frees the VSI before reading the index for the erase, resulting in a use-after-fre...

CVE-2026-99044

In the Linux kernel, the following vulnerability has been resolved: ice: fix use-after-free in dynamic port cleanup icedeallocdynamicport uses dynport-vsi-idx to erase the dynamic port from pf-dynports. However, it frees the VSI before reading the index for the erase, resulting in a use-after-fre...

CVE-2026-99031

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup brmulticastsgdelexcludeports removes automatically added STAREXCL port groups by calling brmulticastdelpg. For S,G entries, that deletion calls back into...

CVE-2026-99031 net: bridge: avoid recursive multicast port cleanup

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup brmulticastsgdelexcludeports removes automatically added STAREXCL port groups by calling brmulticastdelpg. For S,G entries, that deletion calls back into...

CVE-2026-99031

The Linux kernel contains a vulnerability in the net: bridge component where the function br_multicast_sg_del_exclude_ports() performs a recursive call to br_multicast_del_pg(). For S,G entries , this recursion causes each STAR_EXCL port to consume one kernel stack frame. A large number of these ...