Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and patch validation strategies for enterprise defenders and red...

ClearSword

ClearSword Overview A DarkSword Kernel exploit C port I tried to keep it as close to the original as possible, but had to do a few changes to make it work in earlier iOS versions. These changes and personal modifications will be denoted by NOTE comments. I've added line comments to basically ever...

CVE-2025-32463_sudo_chroot

CVE-2025-32463 - sudo chroot Usage The Dockerfile creates a safe, isolated testing environment with a vulnerable version of sudo 1.9.16p2 installed. This allows you to test the exploit without affecting your host system. Build the vulnerable test environment docker build -t cve . Run the containe...

CVE-2025-31161

🚨 CVE-2025-31161 - Critical Authentication Bypass in CrushFTP CVE-2025-31161 is a critical authentication bypass vulnerability in CrushFTP, a popular Managed File Transfer MFT solution. An unauthenticated remote attacker can impersonate any known user including the default crushadmin administrato...

CVE-2025-6019-exploit

CVE-2025-6019: Privilege Escalation Exploit via UDisks2 Filesystem Resize Vulnerability Details CVE ID : CVE-2025-6019 Impact : Local Privilege Escalation LPE Affected Systems : Linux systems with vulnerable udisks2 versions Mechanism : Race condition during filesystem resize allows access to SUI...

CVE-2025-32421---Race-Condition-Vulnerability---Next.js

CVE-2025-32421---Race-Condition-Vulnerability---Next.js PoC Lab for CVE-2025-32421 – Next.js Race Condition Cache Poisoning Simulation CVE-2025-32421 Lab – Next.js Race Condition Cache Poisoning This lab reproduces the behavior described in CVE-2025-32421 through a simulation of race condition +...

CVE-2026-99090

A flaw was found in the Linux kernel's AMD GPU driver. A local user could cause a Denial of Service DoS or system instability by triggering GPU recovery operations. Due to a race condition, the driver allows vertical blanking vblank counter reads from display hardware without proper lock...

CVE-2026-99059

A flaw was found in the Linux kernel's WireGuard implementation. A race condition during the processing of duplicate handshake response messages can allow a remote network peer to cause an inconsistent session state. When duplicate responses are handled concurrently with a new handshake initiatio...

Tomcat-CVE-2024-50379-Poc

Tomcat-CVE-2024-50379-Poc !IMPORTANT For learning and exchange only, do not use for illegal purposes RCE through a race condition in Apache Tomcat reference: https://github.com/iSee857/CVE-2024-50379-PoC Demo Usage go run main.go -u http://localhost:8080/ Todo Detection mechanism for successful...

MiniPlasma

MiniPlasma After re-investigating the technique used in GreenPlasma specifically SetPolicyVal, it turns out cldflt!HsmOsBlockPlaceholderAccess is still vulnerable to the exact same issue that was reported to Microsoft 6 years ago. I'm not taking full credit for this, James Forshaw from google...

yaraQA

yaraQA YARA rule Analyzer to improve rule quality and performance Why? YARA rules can be syntactically correct but still dysfunctional. yaraQA tries to find and report these issues to the author or maintainer of a YARA rule set. The issues yaraQA tries to detect are e.g.: rules that are...

CVE-2026-99065

A flaw was found in the Linux kernel's cpuset subsystem. A race condition during CPU hotplug offline operations can leave the root control group with no active processors before CPU masks are updated, resulting in a null pointer dereference. A privileged local user or process initiating CPU...

Exploit-Dirty-Cow

Exploit - Dirty Cow CVE-2016-5195 Privilege Escalation Lab | Linux Kernel Exploit 📋 Overview Hands-on lab reproducing the DirtyCow vulnerability CVE-2016-5195, a critical race condition found in the Linux kernel that allows unprivileged users to gain write access to read-only memory mappings,...

CVE-2024-6387-analysis

CVE-2024-6387 OpenSSH Signal Race Condition Vulnerability Analysis Vulnerability Overview CVE-2024-6387 is a signal handling race condition vulnerability in OpenSSH versions 8.5p1 through 9.7p1, known as "regreSSHion". An attacker can continuously attempt within 6-8 hours to execute arbitrary cod...

CVE-2026-99061

A flaw was found in the Linux kernel's brcmfmac wireless driver. This vulnerability can lead to a Denial of Service DoS caused by a race condition during the removal of peer-to-peer P2P device interfaces. A local user could trigger this flaw by unloading the driver while the user space process...

CVE-2016-8655

ocoboroot.c linux AFPACKET race condition exploit exploit for Ubuntu 16.04 x8664 user@ubuntu:$ gcc chocoboroot.c -o chocoboroot -lpthread user@ubuntu: $ ./chocoboroot making vsyscall page writable.. new exploit attempt starting, jumping to 0xffffffff8106f320, arg=0xffffffffff600000 sockets...

dirtycow-replacer

PLEASE NOTICE I AM NOT FORMALLY TESTING THIS CODE IT IS BEING DESIGNED AS AN EDUCATIONAL TOOL What's it do? android-dirtycow-replacer uses the CVE-2016-5195 dirtycow exploit to patch a list of over 1000 files. You can edit it to be 10000 but 1000 should do. It checks first to make sure the files...

CVE-2026-99054

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication subsystem. A local user could exploit this flaw to cause a Denial of Service DoS or potential memory corruption. The vulnerability arises from a race condition during topology server shutdown, where connections ar...

CVE-2026-99053

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC subsystem. This flaw allows a local user to cause a denial of service DoS or potentially escalate privileges on the system. The issue occurs because link configuration handlers release read locks without properly...

CVE-2026-99050

A flaw was found in the Linux kernel's Multi-Protocol Synchronous Serial Engine MPSSE GPIO driver. A race condition occurs when enabling interrupt polling while disconnecting a device, allowing scheduled background work to run after the underlying device memory has been released. A local attacker...