CVE-2021-4154

CVE-2021-4154 This bug was fix in https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b This exploit works on most pre-patch kernels for: CentOS 8 kernels higher than linux-4.18.0-305.el8 Debian 11 kernels higher than 5.10.0-8 Fedor...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser...

CVE-2023-6246

Tested on default fedora WS 38...

azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

tricorne

Tricorne Una remezcla de Fedora para seguridad ofensiva. "¿Mi tesoro? Si lo quieren, se los daré. ¡Búsquenlo! Lo dejé todo en ese lugar." Gol D. Roger La versión corta Kali es dueño de Debian. BlackArch es dueño de Arch. Parrot es dueño del nicho de "escritorio centrado en seguridad". Nadie es...

ageverificationbypass

AgeVerificationBypass AVB El Protocolo Santuario para Sistemas Soberanos ¿Por qué necesito proporcionar una identificación para iniciar sesión en una VM de Linux? Esto no es apropiado. 🚨 El Problema: La Barrera de Edad de Archon A partir de 2026/2027, las distribuciones principales Ubuntu y Fedor...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

CopyFail-Patcher

Patcher script for CVE-2026-31431 This repo provide script for the CopyFail vulnerability, for Debian/Ubuntu/RHEL/Fedora, didn't test on other distros but anyway... Just follow these : root@kitploit: $ git clone https://github.com/mhdgning131/CopyFail-Patcher.git $ cd CopyFail-Patcher $ chmod +x...

it355-lab4-enterprise-lan-security

IT355 Lab 4: Enterprise LAN Security & Shellshock Analysis 📌 Project Overview This repository contains a comprehensive security assessment of an enterprise LAN environment. The core focus of this project was the identification, exploitation, and remediation of the Shellshock CVE-2014-6271...

abrt_root

Resumen Este repositorio contiene un PoC de explotación para CVE-2025-12744, una vulnerabilidad de escalada de privilegios local en instalaciones predeterminadas de Fedora Linux versiones 43 e inferiores, tanto Escritorio como Servidor. El fallo proviene de una inyección de comandos en el demonio...

FEP3370-advanced-ethical-hacking

DynoRoot CVE-2018-1111 Final project for the course Advanced Ethical Hacking at KTH, Stockholm This project demonstrates a known vulnerability of Fedora and RedHat machines related to an unsafe client-side implementation of the Dynamic Host Configuration Protocol DHCP. A rogue DHCP server can cra...

[SECURITY] Fedora 44 Update: tar-1.35-9.fc44

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

Fedora 44 : openvpn (2026-725faae162)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-725faae162 advisory. Update to upstream 2.7.7 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2022-27666

CVE-2022-27666 This is the exploit for CVE-2022-27666, a vulnerability that achieves local privilege escalation on the latest Ubuntu Desktop 21.10. Our preliminary experiment shows this vulnerability affects the latest Ubuntu, Fedora, and Debian. Our exploit was built to attack Ubuntu Desktop...

[SECURITY] Fedora 44 Update: libsoup3-3.6.6-10.fc44

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

[SECURITY] Fedora 44 Update: corosync-3.1.10-6.fc44

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

[SECURITY] Fedora 44 Update: chirp-0.4.0^20260828-1.fc44

Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...

[SECURITY] Fedora 44 Update: libre-4.11.0-1.fc44

Libre is a generic library for real-time communications with async I/O support. Features are a SIP stack RFC 3261, SDP, RTP and RTCP, SRTP and SRTCP Secure RTP, DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with client/server, Websockets, Jitter buffer, async I/O poll, epoll, select, kqueue,...

[SECURITY] Fedora 44 Update: baresip-4.11.0-1.fc44

A modular SIP user-agent with support for audio and video, and many IETF standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and IPv6. Additional modules provide support for audio codecs like Codec2, G.711, G.722, GSM, L16 and Opus, audio drivers like ALSA, GStreamer, JACK Audio...