Volume Shadow Copy Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

CVE-2025-26466

CVE-2025-26466 How does this detection method work? This template matches on the following vulnerable versions: root@kitploit: - "SSH-2.0-OpenSSH9.5p1" - "SSH-2.0-OpenSSH9.6p1" - "SSH-2.0-OpenSSH9.7p1" - "SSH-2.0-OpenSSH9.8p1" - "SSH-2.0-OpenSSH9.9p1" If there is a match, the host is considered t...

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project The project documents the completion and analysis of the Fragnesia CVE-2026-46300 TryHackME lab, which demonstrates a Linux kernel page -cache corruption vulnerability capable of achieving local privilege escalation through modification of cached...

kernel: security/keys: fix missed RCU read section on lookup

A flaw was found in the Linux kernel's keyring code. The assocarrayfind function, used for looking up keys, was called without holding the necessary Read-Copy-Update RCU read lock. This oversight allows for a memory corruption vulnerability, particularly affecting persistent key handling, as the...

kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response

A flaw was found in the Linux kernel's Bluetooth Security Manager Protocol SMP. An attacker could exploit this vulnerability during the Bluetooth pairing process by manipulating authentication requirements. This could lead to the selection of a weaker pairing method than intended, potentially...

kernel: wifi: mac80211: defer link RX stats percpu free to RCU

A flaw was found in the mac80211 Wi-Fi driver of the Linux kernel. When an MLO Multi-Link Operation link is removed, the RX statistics per-CPU buffer is freed immediately, while the link container is deferred to RCU Read-Copy-Update. This timing issue can lead to a use-after-free vulnerability,...

React-2-Shell

This is a security exploit tool targeting CVE-2025-55182. It exploits a Remote Code Execution RCE vulnerability in React Server Components 🔥 CVE-2025-55182 Background CVE-2025-55182 also widely referred to as “React2Shell” is a critical remote code execution RCE vulnerability found in React Serve...

Security update for xen

This update for xen fixes the following issues: Update to version 4.20.3 jscPED-8907. Security issues fixed: CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling...

Retrofit-1

Retrofit Cliente HTTP seguro en tipos para Android y Java por Square, Inc. Para más información, visite el sitio web. Descarga Descargue el último JAR u obténgalo mediante Maven: root@kitploit: com.squareup.retrofit2 retrofit 2.4.0 o Gradle: root@kitploit: implementation...

CVE-2026-43284

Dirty Frag — kernel page-cache write tracking site Source for the Dirty Frag patch-status tracker: a single-page site recording which distributions have shipped a fix for the paired page-cache write privilege-escalation chain in the Linux kernel. Where the facts live Everything about the bug — CV...

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — libvirt vulnerability reproduction environment This repository is a snapshot of the reproducible vulnerability environment for CVE-2021-3975 libvirt qemuProcessHandleMonitorEOF use-after-free, CWE-416, exported from the corresponding container image yan5ui/cve-2021-3975:tier1...

Security Bulletin: Jackson databind security vulnerability in IBM Content Cortex reported for ACCE, GraphQL, External-Share

Summary Jackson databind CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518 security vulnerability in IBM Content Cortex. Affected and vulnerable Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose...

CVE-2026-82592

D-Link Router DIR-825M - Buffer Overflow in /boafrm/formDiskFormat Vulnerability Details Detail Information Field| Value ---|--- Vendor| D-Link Product| D-Link DIR-825M and other models sharing the same firmware codebase Affected Version| Firmware v1.1.8 Vulnerability Type| Stack-based Buffer...

CVE-2023-46604

CVE-2023-46604 By Ruben Fobe & Klaas Stessens Intro WARNING This project is intended for educational and lab purposes only. Only use these techniques in environments you own or are authorized to test. This lab will simulate the exploitation of CVE-2023-46604, by using a Kali Linux VM attacker and...

CVE-2026-8023

CVE-2026-8023 — Zephyr HTTP static-fs path traversal PoC Pre-auth path traversal in Zephyr's HTTP server static-fs handler subsys/net/lib/http when wildcard resource matching CONFIGHTTPSERVERRESOURCEWILDCARD=y is used with HTTPRESOURCETYPESTATICFS. Affects both HTTP/1.1 and HTTP/2. GHSA:...

copyfail2_electric_boogaloo_fix

copyfail2electricboogaloofix A temporary mitigation against copyfail variant copyfail2electricboogaloo - Unprivileged Linux LPE via xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path. Page-cache write into any readable file. Overwrites a nologin line in /etc/passwd with sick::0:0:…:/:/bin/bash and s...

CVE-2026-31431-Copy-Fail---Minified-LPE-PoC

CVE-2026-31431-CopyFail---Minified-LPE-PoC ⚠️ Disclaimer For Educational and Authorized Security Testing Purposes Only. This Proof-of-Concept PoC was synthesized for authorized Red Team emulation and vulnerability auditing. The authors and contributors assume no liability for the misuse of this...

CVE-2025-27591

Below - Local Privilege Escalation CVE-2025-27591 Below .log to any root-owned file like /etc/passwd. When below snapshot is executed with sudo, it forcibly sets mode 0666 on the log file and writes to it—even if it's a symlink. This allows injection of a root-privileged user without password,...

ARTAXERXES

ARTAXERXES 🚀 Advanced Multi-Technology Stress Testing Framework Educational Cybersecurity Tool for High-Performance Network Testing 📋 Table of Contents 🎯 Overview ⚡ Performance Comparison 🛠️ Technology Stack 📊 Architecture 🚀 Quick Start ⚙️ Installation 💡 Usage Examples 🔧 Advanced Configuration 📈...