266732 matches found
CVE-2026-31431---Copy-Fail-PoC
Description This repository contains an analysis of CVE-2026-31431 Copy Fail in the Linux kernel. It targets local privilege escalation LPE through page cache manipulation. Legal Notice This project is for educational and testing purposes only. Any unauthorized use is the sole responsibility of t...
CVE-2025-2594
CVE-2025-2594 User Registration & Membership = 4.1.2 - Authentication Bypass Disclaimer! The information presented in this CVE Common Vulnerabilities and Exposures writeup is for educational and informational purposes only. The details provided are based on publicly available resources, research,...
CVE-2022-37706
CVE-2022-37706 Exploit for CVE-2022-37706, a 0-day in one of the main window managers of Linux - Enlightenment https://www.enlightenment.org/. All Credit to MaherAzzouzi https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit. This is a copy of the exploit for CTFs...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation
A flaw was found in the Linux kernel's Server Message Block SMB client. A double-free vulnerability exists in the SMB2ioctl replay path, where a response buffer can be freed twice under specific error conditions. A malicious or compromised SMB server could exploit this by sending crafted response...
CVE-2026-95837 containerd CRI plugin: Checkpoint restore bypasses destination security context
containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...
EUVD-2026-97820
containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...
CVE-2026-95837
containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...
CVE-2026-95837
containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...
CVE-2026-96012
The IBM Db2 Mirror for i GUI (versions 7.4, 7.5, and 7.6 ) is vulnerable to a critical privilege escalation issue (CWE-264 ). An authenticated attacker can craft a malicious request that bypasses input validation and authorization checks to execute arbitrary code, potentially gaining elevated sys...
EUVD-2026-97815
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated...
CVE-2026-96012 IBM Db2 Mirror for i Privilege Escalation
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated...
abrt_root
Overview This repository contains an exploit PoC for CVE-2025-12744, a local privilege escalation vulnerability in default installations of Fedora Linux versions 43 and below, both Desktop and Server. The flaw stems from a command injection in the ABRT daemon, allowing any local user to gain root...
DirtyPIPE-CVE-2022-0847
CVE-2022-0847 POC Source: https://www.exploit-db.com/exploits/50808 1. Compile In Linux, compile the POC with gcc -o dirty dirty.c 2. Usage Execute the program with ./dirty SUID, where SUID refers to the path of a program with the SUID bit set. Commonly, you can use /usr/bin/passwd, i.e., run...
CVE-2025-30400
CVE-2025-30400 Concept: Windows DWM Use-After-Free UAF Project Overview This repository features the CVE-2025-30400 Concept , a Python program designed to illustrate the impact of a Use-After-Free UAF privilege escalation zero-day vulnerability , such as the one reported in Microsoft Windows...
CVE-2021-1732
Windows Privilege Escalation Exploit for CVE-2021-1732 Win32k - Local Privilege Escalation For educational and authorized security research purposes only Original Exploit Authors @Exploit Blizzard Vulnerability Description A vulnerability exists within win32k that can be leveraged by an attacker ...
CVE-2021-4034
Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalation For educational and authorized security research purposes only. Original Exploit Authors @arthepsy Vulnerability Description A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a...
CVE-2020-1956
CVE-2020-1956 CVE-2020-1956 Apache Kylin exploits Kylin 2.3.0-2.3.2,Kylin 2.4.0-2.4.1,Kylin 2.5.0-2.5.2,Kylin 2.6.0-2.6.5,Kylin 3.0.0-alpha,Kylin 3.0.0-alpha2,Kylin 3.0.0-beta,Kylin 3.0.0-3.0.1 and admin competence...
CVE-2025-24203-iOS-Exploit-With-Error-Logging
CVE-2025-24203 Exploit iOS 16.0 – 18.3.2 Thhe CVE-2025-24203 C exploit, targeting iOS versions 16.0 through 18.3.2 on all devices. Exploit by Ian Beer, I just added better error logging and graceful failing : Originally discovered by Ian Beer of Google Project Zero , I slightly improved its error...
