594112 matches found
CVE-2026-43499_HW-CLT-AL01
CVE-2026-43499 Android arm64 로컬 권한 상승 적용 영어 | 중국어 이것은 CVE-2026-43499 를 위한 Android arm64 로컬 권한 상승 적용 프로젝트입니다. 프로젝트는 대상 장치의 boot.img 및 profile 정보를 기반으로 target.h를 생성한 다음, 해당하는 preload.so를 컴파일합니다. 참고: 이 프로젝트는 범용 적용 프레임워크로, 특정 단일 기기에 국한되지 않습니다. 실제 사용 가능 여부는 generatetarget.py가 target.h를 성공적으로 생성할 수 있는지...
s26-m1q-ghostlock-selinux
S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU 激活达成 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ 最终结果：uid=0 root + KernelSU 激活达成 root@kitploit: exploit 后通过...
BloodBash
BloodBash A SquidSec Open Source Project SquidOffense.com · GitHub BloodBash is an open source offline SharpHound and AzureHound JSON analyzer, created and managed by SquidSec. It builds a graph, surfaces AD/Entra attack paths and misconfigs, and prints prioritized findings. No Neo4j or BloodHoun...
ALPINE-CVE-2026-78408
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
CVE-2026-78408
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
AZL-99393 CVE-2026-78408 affecting package util-linux 2.40.2-5
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
DEBIAN-CVE-2026-78408
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
ish
iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials README中文 如若未能保持最新，请提交PR以更新 Hacking...
cheat-engine-undetectable
Cheat Engine Undetectable アカデミックリサーチ版 — サイバーセキュリティ教育および大学レベルのリバースエンジニアリング研究のための、多層型アンチチート回避機能を備えた改変版 Cheat Engine。 免責事項: このプロジェクトは学術研究、大学の課題、サイバーセキュリティ教育のみを目的としています。学期終了後は必ず破棄してください。 アーキテクチャ root@kitploit: ┌─────────────────────────────────────────────────────────┐ │ Cheat Engine 7.5 │ │ Lazarus ...
CVE-2025-0133
CVE-2025-0133 Palo Alto PAN-OS GlobalProtect 게이트웨이 및 포털의 getconfig.esp 핸들러에서 발견된 반사형 XSS 취약점입니다. user 쿼리 매개변수가 Captive Portal 페이지에 인코딩되지 않고 반영됩니다. 인증된 GlobalProtect 사용자를 조작된 링크로 유인한 공격자는 기업 VPN 포털의 신뢰 컨텍스트에서 JavaScript를 실행할 수 있으므로 피싱 캠페인이 훨씬 더 효과적이게 됩니다. 2025년 5월에 공개되었습니다. PAN-SA-2025-0005에서...
CVE-2026-49009
root@kitploit: ▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀...
Exploit for Deserialization of Untrusted Data in Facebook React
Penetration Testing Writeup: Next.js RCE & Node.js Inspector Pri...
CVE-2026-23744-PoC
CVE-2026-23744-PoC MCP RCE 익스플로잇 Linux /api/mcp/connect를 악용하여 원격 명령 실행을 수행하는 PoC입니다. 요구 사항 root@kitploit: pip install requests 사용법 root@kitploit: python3 exploit.py 예시: root@kitploit: python3 exploit.py mcp.something.com 설정 스크립트 내에서 수정 root@kitploit: attackerip = "YOURIP" port = 4444 리스너...
-Linux-PrivEsc-CVE-2024-48990
Privesc-need-restart-2024-48990 Описание эксплойта CVE-2024-48990 - Pure Python Этот скрипт эксплуатирует уязвимость CVE-2024-48990 в утилите needrestart Linux путем перехвата пути библиотек PYTHONPATH hijacking. В отличие от исходного вектора, этот метод использует исключительно Python, что...
PinTheft-go
pintheft-go pintheft の Go 移植版 - RDS zcopy double-free LPE。Dirty Frag 脆弱性クラスに属します。 !IMPORTANT Arch Linux は、この脆弱性に対して最も露出しているディストリビューションの一つです。RDS モジュールをデフォルトでロードできる数少ないディストリビューションの一つだからです。 動作原理（tl;dr） バグは rdsmessagezcopyfromuser にあります。この関数は FOLLGET を使用してユーザーページを1つずつ GUP...
CVE-2026-78408 Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
EUVD-2026-70105
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
CVE-2026-78408
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
CVE-2026-78408
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
CVE-2026-78408 Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...