CVE-2016-5195

CVE-2016-5195 gcc -pthread dirty.c -o dirty -lcrypt 参考链接 https://github.com/FireFart/dirtycow/blob/master/dirty.c...

gemini-2.5-pro-nf-tables-red-teaming

Caso de Estudio de Red Teaming de Gemini 2.5 Pro sobre nftables CVE-2023-32233 Investigación de Seguridad de LLM | Divulgación Responsable | Evaluación de Alineación de IA Investigador : Niranj R Mahaswar Destawell Programa de Recompensas por Vulnerabilidades de Google AI : 889286 — Fuera de...

CVE-2024-6387

Script de Mitigación de OpenSSH CVE-2024-6387 Este repositorio contiene un script de Python diseñado para ayudar a los administradores de red a escanear y asegurar las configuraciones SSH contra la vulnerabilidad CVE-2024-6387 encontrada en el mecanismo de manejo de señales de OpenSSH. Esta...

CVE-2021-3560

CVE-2021-3560 PolKit条件竞争本地提权分析 toc 漏洞简介 漏洞编号: CVE-2021-3560 漏洞评分: 漏洞产品: linux PolKit polkitd 影响范围: 源代码 0.113 引入；https://www.venustech.com.cn/newtype/aqtg/20210611/22788.html RHEL 8 Fedora 21及更高版本 Debian testing “bullseye” Ubuntu 20.04 利用条件: linux 本地；dbus + polkitd 存在 利用效果: 本地提权 源码获取: polkit-0.113...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

From-Foothold-to-Domain-Admin-Arma-CVE-2025-54918-en-DevOps-del-Mundo-Real Explotación simulada y mitigación de CVE-2025-54918 fallo NTLM de Windows. Incluye scripts de detección, parcheo con Ansible y endurecimiento de CI/CD. Demuestra la escalada de privilegios desde acceso de bajo nivel hasta...

mach_race

Exploit de escalada de privilegios local de Mach Race para OS X c fG! 2015, 2016, [email protected] - https://reverse.put.as Un exploit universal de OS X para SUID, SIP y entitlements binarios CVE-2016-1757. Uso contra un binario SUID: ./machraceserver /bin/ps compatmode for i in seq 0...

CVE-2026-98315

In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfsnonresidentattrshrink calls runlist helpers that require the runlist write lock, but did not hold it while freeing clusters and truncating the runlist. Serialize those...

DEBIAN-CVE-2026-98305

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xxsetup arms the stats poll before mxl862xxsetupmdio, and nothing stops it until dsaregisterswitch has returned an error to mxl862xxprobe. DSA frees the dsaport list...

CVE-2026-98305

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xxsetup arms the stats poll before mxl862xxsetupmdio, and nothing stops it until dsaregisterswitch has returned an error to mxl862xxprobe. DSA frees the dsaport list...

CVE-2026-98276

In the Linux kernel, the following vulnerability has been resolved: net: lock the socket in sockgettstamp sk-skflags must only be changed while holding the socket lock, because socksetflag and sockresetflag use non atomic operations setbit and clearbit. sockgettstamp is one of the last places whe...

CVE-2026-98253

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

CVE-2026-98251

In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels ovsctgetconnlabels adds the labels extension when a conntrack entry does not have one. Confirmed conntracks can be read locklessly, so adding an extension may reallocate...

CVE-2026-98305

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xxsetup arms the stats poll before mxl862xxsetupmdio, and nothing stops it until dsaregisterswitch has returned an error to mxl862xxprobe. DSA frees the dsaport list...

CVE-2026-98276

In the Linux kernel, the following vulnerability has been resolved: net: lock the socket in sockgettstamp sk-skflags must only be changed while holding the socket lock, because socksetflag and sockresetflag use non atomic operations setbit and clearbit. sockgettstamp is one of the last places whe...

CVE-2026-98301

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug reports. brmstsetstate calls switchdevportattrset for nonzero MSTIs while holding rcureadlock which invokes the blocking...

DEBIAN-CVE-2026-98174

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing to itself, making listempty always return false and listadd...

CVE-2026-98174

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing to itself, making listempty always return false and listadd...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

php-app-race-condition

Vulnerable PHP App Race Condition Environment setup: docker-compose up Environment verification: Connection Test: http://localhost/test.php Vulnerable endpoint: http://localhost/poc.php Race condition exploit: echo http://localhost | nuclei -t race.yml Observe that less than 1280$ were accounted...

CVE-2026-98360

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcgtree only after rxemcastadd succeeds rxegetmcg publishes a newly allocated multicast group in rxe-mcgtree before programming the backing Ethernet multicast address with rxemcastadd, which runs outside...