1285 matches found
shellcode
shellcode “A vulnerability provides an assembly language for a computer that has never been programmed before, and that was not designed with programmability in mind.” -- Halvar Flake A collection of new and old shellcode samples. Article https://hnsecurity.it/blog/new-and-old-shellcode-samples/...
K80Pro-miro-CVE-2026-98260
CVE-2026-98260 — Android arm64 POSIX Timer UAF 红米k80 Pro OS 3.0.305.0 移植 非 leader 线程 execve 触发的 POSIX CPU timer UAF，从 uid=2000 拿到 uid=0 + 完整 capabilities（CapEff=0x1ffffffffff）。 ⚠️ 仅限自有设备的安全研究 ，使用前请读文末免责声明。 支持范围 项| 值 ---|--- 机型| Redmi K80 Pro miro 系统| HyperOS 3 / OS3.0.305 （OS3.0.304 理论可用，同一内核...
SLAE
SLAE Securitytube Linux Assembly Expert SLAE SLAE-721 Build + Assembling ... + Linking ... + Extract Shellcode from binary ... "\x31\xc0\x50\x68\x2f\x2f\x73\x68" "\x68\x2f\x62\x69\x6e\x89\xe3\x89" "\xc1\xb0\x0b\xcd\x80" + Create C-Header file ... + Compile PoC ... + Run PoC ... + Shellcode Length...
userland-exec
Userland Exec Userland exec replaces the existing process image within the current address space with a new one. It mimics the behavior of the system call execve, but the process structures describing the process image remain unchanged. In other words, the process name reported by system utilitie...
ulexecve
Quick Start Execute dynamic or statically compiled ELF Linux binaries without ever calling execve. cat /bin/echo | ulexecve - hello hello Introduction This Python tool is called ulexecve and it stands for userland execve. It helps you execute arbitrary ELF binaries on Linux systems from userland...
experiments
Experiments Repository of various experiments / PoC. debugging-secure-kernel: PoC gdb debugging the Windows 10 secure kernel, on top of QEMU KVM dns: Experiments regarding DNS / Certificate transparency / Homoglyphs Attack Surface Reduction: Demystifying Windows Attack Surface Reduction internals...
cve-2026-98260-uaf
CVE-2026-98260 — trigger-only PoC posix-cpu-timers UAF Vulnerability exec: Cleanup POSIX timers right after dethread author Hyunwoo Kim, upstream 2026-09-11, Fixes: 55e8c8eb2c7b = since 5.7. A CLOCKTHREADCPUTIMEID timer is attached to a non-leader thread E; in execve, after dethread swaps the tid...
Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash
This repository does not have a README...
Webmin_Exploit_reverse_shell
ntroduction: The Webmin Exploit is a targeted exploit for the Webmin service, which can be exploited on older versions of Webmin. This exploit uses various techniques to execute malicious code and gain unauthorized access to the target system. It involves: Using both C and Assembly code to execut...
CVE-2026-99253
In the Linux kernel, the following vulnerability has been resolved: iouring/cancel: rearm local work wake up before sleep iouringtrycancelrequests sets -cqwaitnr to 1 so that the next ioreqlocalworkadd wakes the cancelling task. The add that takes the count to zero is the only one that wakes, lat...
DEBIAN-CVE-2026-99254
In the Linux kernel, the following vulnerability has been resolved: iouring: don't flood a cancelling task with taskwork ioringexitwork asks each task which has used the ring to remove its tctx node, by taskwork, and repeats that until the list is empty. iotctxexitcb doesn't touch the node while...
DEBIAN-CVE-2026-99253
In the Linux kernel, the following vulnerability has been resolved: iouring/cancel: rearm local work wake up before sleep iouringtrycancelrequests sets -cqwaitnr to 1 so that the next ioreqlocalworkadd wakes the cancelling task. The add that takes the count to zero is the only one that wakes, lat...
UBUNTU-CVE-2026-99254
In the Linux kernel, the following vulnerability has been resolved: iouring: don't flood a cancelling task with taskwork ioringexitwork asks each task which has used the ring to remove its tctx node, by taskwork, and repeats that until the list is empty. iotctxexitcb doesn't touch the node while...
UBUNTU-CVE-2026-99253
In the Linux kernel, the following vulnerability has been resolved: iouring/cancel: rearm local work wake up before sleep iouringtrycancelrequests sets -cqwaitnr to 1 so that the next ioreqlocalworkadd wakes the cancelling task. The add that takes the count to zero is the only one that wakes, lat...
Exploit for CVE-2026-98260
Determination of Kernel CVE Applicability on Locked Devices...
Linux Distros Unpatched Vulnerability : CVE-2026-99253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/cancel: rearm local work wake up before sleep iouringtrycancelrequests sets -cqwaitnr to 1 so that the next ioreqlocalworkadd wakes the cancelling task...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after dethread A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread’s posixcputimers. The task is looked up...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Wazuh and Sigma detections for PHP2Shell CVE-2026-109618 / CV...