cve-2024-6387_AImade

Presentazione del codice di test per CVE-2024-6387 Introduzione Questo documento presenta uno script Python progettato per testare la vulnerabilità CVE-2024-6387, identificata in OpenSSH. Questa vulnerabilità è una race condition nel gestore del segnale SIGALRM che può consentire l'esecuzione...

CVE-2023-37250-POC

CVE-2023-37250 PoC Articolo: https://hackingiscool.pl/roaming-and-racing-to-get-system-cve-2023-37250/...

CVE-2024-6387_poc

CVE-2024-6387 Prova de Conceito PoC Descrição Este repositório contém uma PoC para a vulnerabilidade CVE-2024-6387, que visa uma condição de corrida no manipulador de sinais no servidor OpenSSH sshd em sistemas Linux baseados em glibc. A vulnerabilidade permite execução remota de código como root...

CVE-2021-3560_Polkit

CVE-2021-3560 Escalação de Privilégio Local no Polkit root@kitploit: .--. .-" "-. .--. / .. / .-. .-. / .. \ | | '| / Y \ |' | | | \ \ \ 0 | 0 / / / | \ '- ,.-" "-./, -' / '-' / ^ ^ \ '-' .--'| . ./ |'--. / \ \ / / \ / '. '---' .' \ / '---' \ / \ Um exploit automatizado para a vulnerabilidade...

bad-epoll

Bad Epoll: Der Fehler, den Mythos übersehen hat Ein Prozess ohne Privilegien erlangt auf Google kernelCTF Root-Rechte. Bad Epoll CVE-2026-46242 ist ein Use-after-Free durch eine Race Condition im epoll-Subsystem des Linux-Kernels. Dieser Fehler erlaubt es einem Prozess ohne Privilegien, Root-Rech...

CVE-2026-33825

🔵 CVE-2026-33825 — “BlueHammer” 🔵 Escalatazione dei Privilegi Locale LPE di Microsoft Defender BlueHammer è una vulnerabilità di escalation dei privilegi locale ad alta gravità che colpisce i componenti di Microsoft Defender sui sistemi Windows. Il difetto consente a un utente malintenzionato con...

CVE-2026-46333

🚀 CVE-2026-46333 - ssh-keysign-pwn Высококачественное доказательство концепции для уязвимости состояния гонки в ядре Linux Чистый и надежный эксплойт доказательства концепции для CVE-2026-46333 — локальное раскрытие информации через состояние гонки в пути завершения процесса ядра Linux. 🖼️ Скриншо...

CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll 影响 Linux 内核eventpoll 子系统的高危释放后使用漏洞，可能导致本地权限提升、内存损坏或拒绝服务。 📖 概述 CVE-2026-46242 是 Linux 内核 eventpoll epoll 实现中的一个释放后使用（UAF）漏洞。 该问题存在于 epremove 逻辑内部，其竞态条件允许 struct file 及其关联的 eventpoll 对象在被引用时被释放。 具备本地访问权限 的攻击者可以利用此竞态条件破坏内核内存，可能导致： 🔺 本地权限提升 💥 内核内存损坏 🚫 拒绝服务（内核恐慌） ⚠️ 系统不稳定 📊...

CVE-2024-30088

CVE-2024-30088 Bug: Il bug si trova all'interno della funzione AuthzBasepCopyoutInternalSecurityAttributes quando il kernel copia la struttura AUTHZBASEPSECURITYATTRIBUTESINFORMATION del token corrente nello spazio utente, la quale ha una struttura come questa: root@kitploit: //0x30 bytes sizeof...

collateral-damage

Danni Collaterali Danni Collaterali è un exploit per il kernel di Xbox SystemOS che sfrutta CVE-2024-30088. Prende di mira console Xbox One e Xbox Series con versioni del kernel 25398.4478, 25398.4908 e 25398.4909. Il punto di ingresso iniziale è tramite l'applicazione UWP Game Script. I payload...

CVE-2026-47836

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

ksmbrace

ksmbrace Ricerca di vulnerabilità in ksmbd , il server SMB3 nel kernel Linux fs/smb/server/. Difetti lato attaccante autenticato sui percorsi durable-handle e di risoluzione dei path di ksmbd. Il nome richiama il tema della race condition di questa linea di lavoro vedi la UAF sul byte-range-lock...

RoguePlanet

RoguePlanet RoguePlanet Windows Defender Schwachstelle Willkommen zurück allerseits !!! Der Exploit ist eine Race Condition, also ist es Glückssache. Ich habe auf manchen Maschinen eine 100% Erfolgsrate erzielt, während er auf anderen nicht funktionierte. Der Exploit wurde unter Windows 11...

CVE-2026-47836

Spring Cloud Config Server is susceptible to a time-of-check-time-of-use (TOCTOU) attack via the spring.cloud.config.server.svn.basedir property, which specifies where SVN repositories are cloned. The affected version ranges are 5.0.0–5.0.4, 4.3.0–4.3.4, 4.0.0–4.2.8, and 3.1.14 and earlier . The ...

CVE-2026-78991

A flaw was found in WebProtect in Google Chrome. A race condition vulnerability allows a remote attacker, who has compromised the renderer process, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-79196

A flaw was found in Google Chrome's Editing feature. This race condition vulnerability allows a remote attacker, leveraging social engineering, to obtain sensitive information by crafting a malicious HTML page. Successful exploitation could lead to unauthorized disclosure of user data...

CVE-2026-80556

CVE-2026-80556 is a use-after-free vulnerability in the Linux kernel's mmc: atmel-mci driver, occurring in atmci_remove due to a race condition. When the module is removed, atmci_remove performs cleanup and devm_kzalloc-allocated host memory is freed, but pending or running work (atmci_work_func ...

CVE-2026-80548

This vulnerability affects the s390/vfio_ccw driver in the Linux kernel . The io_mutex lock, originally defined to serialize io_regions , had also been informally associated with I/O operations due to their close relationship. This left a small number of race condition windows unaddressed. The fi...

CVE-2026-80547

CVE-2026-80547 affects the Linux kernel 's s390/vfio_ccw driver. The vulnerability arises because the CRW (Channel Retry Word) region relies exclusively on asynchronous events from hardware, yet lacks a dedicated lock to manage the list of those payloads. Without the lock, payloads may not be rea...

CVE-2026-74754

CVE-2026-74754 is a race condition in the Linux kernel SCSI core. The shost->eh_noresume flag is consulted twice per error-handling (EH) iteration—once before scsi_autopm_get_host() and once before scsi_autopm_put_host(). If a power-management path (e.g., ufshcd_set_dev_pwr_mode()) flips this ...