CVE-2022-0847

CVE-2022-0847 exploit of CVE-2022-0847 which directly remove password of the root account Usage: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit Requrements: gcc Work summery: The traditional classic exploit POC of Max Kellermann used to add a user with root privilage but in this POC exploit, It...

picohaxx

now with 100% more source code ™ picohaxx Open source Kernel exploit for Pico 4 devices based on cve-2023-33107 Optimized for a rock-solid 100% success rate and speed 7s on all vulnerable Pico 4 devices. Supported Pico 4 OS Versions: 5.2.0 up to 5.11.0 Chinese or Global 5.9.9. As of this writing...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2026-98560

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When handling local connections, the system miscalculates the required communication paths, allocating internal work queues that are not properly freed during connection teardown. A local user can exploit this...

cve-2026-52910-poc

CVE-2026-52910 — reuseport cBPF use-after-free reproducer A race reproducer and stress toolkit for CVE-2026-52910 , a use-after-free UAF in the Linux kernel's handling of classic BPF cBPF reuseport selector programs , fixed upstream by commit "bpf: Free reuseport cBPF prog after RCU grace period"...

CVE-2026-98556

A flaw was found in the Linux kernel's Google Virtual NIC gve driver. A local user with raw packet access or an adjacent guest system can trigger a Denial of Service DoS by sending network packets with an excessively large segment size. The driver fails to validate the Maximum Segment Size MSS...

CVE-2026-98555

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. When an error occurs during network packet header initialization, the kernel mistakenly frees the incorrect memory buffer, resulting in a use-after-free condition, a double-free, and memory leaks. An attacker could exploit...

CVE-2022-41218

Introduction This vulnerability is a race condition vulnerability that occurs in drivers/media/dvb-core/dmxdev.c. Therefore, a race condition may occur in the usb device driver using this dmxdev. This vulnerability could be used to trigger 3 UAFs. Vulnerability 1. vmalloc UAF write First, the...

CVE-2026-98557

A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. This vulnerability may allow a local attacker to cause a Denial of Service DoS by transmitting network traffic that uses User Datagram Protocol UDP Generic Segmentation Offload GSO. Because the driver improperly...

CVE-2026-98558

A flaw was found in the Linux kernel's networking subsystem. When a central processing unit CPU is taken offline, pending network packet buffers held in deferred processing queues are not properly flushed. A privileged local user or administrative action offlining a CPU during network device...

CVE-2024-21338

CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...

CVE-2018-4407

CVE-2018-4407 CVE-2018-4407 is a buffer overflow vulnerability in the XNU kernel's ICMP error code. It causes IOS devices to crash both laptops and mobiles upon receival of one yes 1! single bad packet. The bug was originally disclosured by Kevin Backhouse on his lgtm blogpost on October 30th 201...

linux-exploit-suggester

LES: Linux privilege escalation auditing tool Quick download: wget https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh -O les.sh Details about LES usage and inner workings: https://blog.z-labs.eu/2019/05/10/les-paper.html Additional resources for the...

CVE-2018-11235

CVE-2018-11235 CVE-2018-11235...

Copy-Fail-CVE-2026-31431-Lab

Copy Fail CVE-2026-31431 — Exploit Reproduction & Detection Lab This repository documents the end-to-end reproduction, detection engineering, and incident response for CVE-2026-31431 "Copy Fail" , a critical Linux kernel local privilege escalation vulnerability affecting kernels 4.14 through...

root-my-s24

RootMyS24 Root without unlocking · Samsung Galaxy S24 series S9210 / S9260 / S9280 + China Z Fold6 A security research project built on kernel vulnerability CVE-2026-43499 English · 简体中文 · 繁體中文（台灣） · 繁體中文（香港） Security research notice: This project is intended solely for security research and the...

CVE-2026-31431-Copy-Fail

CVE-2026-31431: When the Copy Isn’t a Copy and the Failure Comes Too Late Artifacts and scripts for the CopyFail writeup. The deep-dive walkthrough: https://4xura.com/binex/kernel/copy-fail/ Layout proof-of-concept/ contains the primitive-only demos used in the writeup. exploit-scripts/ contains...

CVE-2022-0847

CVE-2022-0847 Original link https://dirtypipe.cm4all.com/ Usage gcc exploit.cpp -o exploit ./exploitIt will spawn a root shell Vulnerability description This is CVE-2022-0847, a vulnerability in the Linux kernel since version 5.8 that allows overwriting data in arbitrary read-only files. This lea...

difuze

difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...

CVE-2026-98553

A flaw was found in the Linux kernel's automount file system autofs. A local user can trigger this issue by initiating an autofs mount operation that fails during initialization, causing the kernel to fail to release associated pipe file references. Repeated exploitation can permanently leak syst...