massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2019-2215

CVE-2019-2215 출처: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885 Samsung S7 및 S7 Edge 커널 3.18.x는 취약하지 않은 것으로 보입니다. 하지만 PoC 조정을 통해 더 많은 작업을 하면 취약할 수 있습니다. 루팅된 장치가 없어 더 이상 확인할 수 없습니다. Samsung S3Neo+ LineageOS,...

bad-epoll

Bad Epoll: Mythos가 놓친 버그 권한이 없는 프로세스가 Google kernelCTF에서 root로 권한을 상승시키는 모습. Bad EpollCVE-2026-46242은 Linux 커널의 epoll 서브시스템에서 발생하는 레이스 컨디션 use-after-free 취약점입니다. 이 버그는 권한이 없는 프로세스가 Linux 데스크톱과 서버뿐만 아니라 Android 기기에서도 root가 될 수 있게 합니다. Bad Epoll은 Jaeyoung Chung이 Google kernelCTF에 0-day로 제보하고 익스플로잇한...

CVE-2019-2215

CVE-2019-2215 다음 문제는 https://android.googlesource.com/kernel/msm의 android-msm-wahoo-4.4-pie 브랜치및 다른 브랜치에도 있을 수 있음에 존재합니다: binder 드라이버의 /drivers/android/binder.c에 있는 binderthread 구조체의 wait 멤버에 대한 use-after-free가 있습니다. 업스트림 커밋에 설명된 바와 같이: “binderpoll는 작업을 위해 sleep할 수 있는 thread-wait waitqueue를 전달합니다...

ScannerBadEpoll

ScannerBadEpoll Проверка уязвимости: Bad Epoll CVE-2026-46242 Разработано Soluciones & Proyectos Franklin Технологические решения с профессиональной поддержкой Это автоматизированный скрипт на Bash, предназначенный для проверки текущей версии ядра Linux и определения, находится ли система в...

AZL-99963 CVE-2026-80920 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: iouring: defer eventfd signaling when queued from a wakeup handler ioreqlocalworkadd signals the CQ ring eventfd inline when it is the one to push the first entry onto -worklist. For DEFERTASKRUN rings that add is frequently done...

CVE-2026-80920

CVE-2026-80920 affects the Linux kernel io_uring subsystem. The root cause is that io_req_local_work_add() signals the CQ ring eventfd inline when it pushes the first entry onto ->work_list. For DEFER_TASKRUN rings, this add is frequently done from a waitqueue wakeup handler where an arbitrary...

cve-2019-2215_SH-M08

2019 年 10 月より前のセキュリティパッチが当たった Android 端末で root 権限を取得する概念実証コードの AQUOS sense 2SH-M08移植版です。 動作環境 以下の OS バージョンで動作を確認しています。他のバージョンや他の機種で動かす場合は「移植方法」の章に従って移植してください。 root@kitploit: ro.build.date: 2019年 3月 20日 水曜日 04:58:03 JST ro.build.description: Anasui-user 8.1.0 S3200 01.00.02 release-keys...

CVE-2019-2215

CVE-2019-2215 CVE-2019-2215 — Android Binder Use-After-Free Privilege Escalation Описание Эксплоит для уязвимости CVE-2019-2215 — use-after-free в драйвере binder ядра Android. Позволяет повысить привилегии до root на уязвимых устройствах. Уязвимость CVE-2019-2215 — use-after-free в binderthread...

CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll Уязвимость типа «использование после освобождения» высокой степени серьёзности в подсистемеeventpoll ядра Linux, которая может привести к локальному повышению привилегий, повреждению памяти или отказу в обслуживании. 📖 Обзор CVE-2026-46242 — это уязвимость использовани...

CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" 이 저장소는 x86용으로 이미 존재하는 익스플로잇을 기반으로 한 aarch64 커널용 Bad Epoll 검증기입니다. epoll Use-After-Free 경쟁 조건을 통한 Linux 커널 로컬 권한 상승 필드| 상세 ---|--- CVE| CVE-2026-46242 별칭| Bad Epoll 유형| 경쟁 조건을 통한 Use-After-Free UAF CVSS| 7.8 높음 영향| 로컬 권한 상승 → root 영향받는 커널| 5.10 – 6.11 LTS & COS 서브시스템|...

CVE-2019-2215

CVE-2019-2215 ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: КОД, ПРЕДОСТАВЛЕННЫЙ ЗДЕСЬ, ПРЕДНАЗНАЧЕН ТОЛЬКО ДЛЯ ОБРАЗОВАТЕЛЬНЫХ И ДЕМОНСТРАЦИОННЫХ ЦЕЛЕЙ. Я НЕ ПОДДЕРЖИВАЮ И НЕ НЕСУ НИКАКОЙ ОТВЕТСТВЕННОСТИ ЗА ЛЮБОГО, КТО ИСПОЛЬЗУЕТ ЭТОТ КОД ИЛИ ИНФОРМАЦИЮ В НЁМ, ИЛИ ЕГО СБОРКУ, ИЛИ ЧТО-ЛИБО В ЭТОМ РЕПОЗИТОРИИ В...

android-kernel-exploitation-lab

Android 커널 익스플로잇 실습 이 실습은 binder 서브시스템의 중요한 Android 커널 취약점인 CVE-2019-2215를 탐색할 수 있는 환경을 설정하는 과정을 안내합니다. 문서 환경 설정 gdb 스크립트를 사용한 커널 권한 상승 syzkaller를 사용한 퍼징 AFL++를 사용한 퍼징 기술 세부 사항: CVE-2019-2215 이 취약점은 Android binder 드라이버의 use-after-free로, 다음과 같은 특징이 있습니다: 1. 근본 원인 : binder fd가 epoll 인스턴스에 추가된 후 스레드...

Linux Distros Unpatched Vulnerability : CVE-2026-26445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the...

Linux Distros Unpatched Vulnerability : CVE-2026-33263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running i...

CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

AZL-98313 CVE-2026-33263 affecting package dovecot 2.3.20-1

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

ALPINE-CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

EUVD-2026-67658

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...