CVE-2025-62215_analysis

CVE-2025-62215 Vulnerability Analysis Windows Kernel Race Condition / Double-Free Privilege Escalation の脆弱性調査プロジェクト。 Overview Item| Detail ---|--- CVE| CVE-2025-62215 Component| Windows Kernel ntoskrnl.exe Type| Race Condition CWE-362 / Double Free CWE-415 Impact| Local Privilege Escalation →...

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — IPv6 TCP/IP Remote Code Execution Analysis 📌 Project Description This project presents a technical analysis and practical demonstration of the critical vulnerability CVE-2024-38063 , disclosed by Microsoft during Patch Tuesday August 13, 2024. The vulnerability affects the...

CVE-2026-98683

A flaw was found in the Linux kernel's SMB client. When zeroing a range within a file that does not reach the end of the file, dirty cached data is not flushed before the client requests the server to zero the region. A local user performing a zero-range operation could cause dirty cached pages t...

swapgs-attack-poc

PoC for the SWAPGS attack CVE-2019-1125 This repository holds the sources for the SWAPGS attack PoC publicly shown at Black Hat USA, 2019. Contents leakgsbkva - variant 1 look for random values in kernel memory; limited to PE kernel image header leakgsbkvat - variant 2 extract random values from...

CVE-2023-28252-Compiled-exe

CVE-2023-28252-Compiled-exe A modification of Fortra's excellent CVE-2023-2852 Privesc Exploit. Works on Windows 11 21H2 clfs.sys version 10.0.22000.1574 - also works on Windows 10 21H2, Windows 10 22H2, Windows 11 22H2 and Windows server 2022. This version retains the original functionality, but...

CVE-2022-42864

CVE-2022-42864: Diabolical Cookies What is this repo? This is my incomplete proof-of-concept exploit for CVE-2022-42864, a time-of-check-time-of-use vulnerability in IOHIDFamily that was fixed in iOS 16.2 / macOS Ventura 13.1. What is the status of the proof-of-concept? The exploit currently...

CVE-2024-27815

CVE-2024-27815 XNU kernel buffer overflow. Introduced in xnu-10002.1.13, fixed in xnu-10063.121.3. Writeup: https://jprx.io/cve-2024-27815 gcc TURPENTINE.c -o TURPENTINE ./TURPENTINE Hash $ sha256sum TURPENTINE.c f7160a6ad7d52f32d64b86cf3006c98a217954d80c3fc71a8f27595e227d0fa0 TURPENTINE.c Hash...

CVE-2026-98682

A flaw was found in the Linux kernel's Server Message Block SMB client subsystem. Due to improper synchronization during server-side file copy and clone operations, pending write operations are not drained before copying begins. A local user could exploit this timing issue during copy operations ...

CVE-2026-46300

CVE-2026-46300 Linux kernel root exploit git clone https://github.com/ExploitEoom/CVE-2026-46300.git chmod +x exploit ./exploit...

copyfail-fix

CopyFail-Fix 🌐 English | Português | Español | 中文 | Íslenska One-command mitigation and patch for CVE-2026-31431 — the Linux kernel "Copy Fail" local privilege escalation vulnerability. The script disables the affected algifaead module, upgrades your kernel via apt, and optionally installs a...

Linux-Kernel-local-DoS

Linux-Kernel-local-DoS Local linux kernel DoS based on memleak from an unpriv user, just need to do a PRTIMERCREATERESTOREIDSON prctl first based on https://x.com/spendergrsec/status/1990887509664928062...

CVE-2026-98681

A flaw was found in the Linux kernel's SMB Server Message Block client. Multiple internal file status flags shared the same memory byte without unified locking, creating a race condition during concurrent file operations. A local user performing simultaneous file operations could cause updates to...

AndroidDriveSignity

AndroidDriveSignity AndroidDriveSignity is a Python script designed for patching Android kernelARMv8.3 files, enabling the loading of drivers without being subject to various verification checks, specifically signature verifications. This tool aims to facilitate the development and testing proces...

CVE-2026-98680

A flaw was found in the Linux kernel's Kionix KX022A accelerometer sensor driver. When enabling the device buffer fails during register configuration, the driver fails to properly free allocated memory or restore previous hardware states. A local user could trigger this error condition to cause a...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. Affected versions The exploit affects versions from includin...

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation This is just a quick note on how to exploit these vulnerabilities to get root. Start by utilizing this tool on the attacker machine: https://raw.githubusercontent.com/ibrahmsql/CVE-2025-6018/refs/heads/main/CVE-202 You should now have a shell a...

check_icmp_dos

checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 Or use the script python checkicmpdos.py 127.0.0.1 This vulnerability allows an attacker, as long as they are...

CVE-2026-98679

A flaw was found in the Linux kernel's KXCJK-1013 accelerometer driver. A local user could exploit this flaw by submitting duplicate event disable requests to the device configuration interface. Because the driver does not filter repeated disable requests, it improperly releases a runtime power...

salt

Welcome to salt , a tool to reverse and learn kernel heap memory management. It can be useful to develop an exploit, to debug your own kernel code, and, more importantly, to play with the kernel heap allocations and learn its inner workings. This tool helps tracing allocations and the current sta...

CVE-2026-98678

A flaw was found in the Linux kernel's Analog Devices AD4030 Analog-to-Digital Converter ADC driver. The driver calculates a mathematical logarithm on an averaging parameter prior to validating whether the input is positive. A local user with access to configure the device could provide a...