libc-database

Web interface libc-database now has a web service and frontend. Visit https://libc.rip/ to try it out! Read https://github.com/niklasb/libc-database/tree/master/searchengine if you are interested in the API. Building a libc offset database If you're getting errors, please check the "Requirements"...

shadow

shadow :: De Mysteriis Dom jemalloc shadow is a jemalloc heap exploitation framework. It has been designed to be agnostic of the target application that uses jemalloc as its heap allocator be it Android's libc, Firefox, FreeBSD's libc, standalone jemalloc, or whatever else. The current version 2....

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

Exploit for Unexpected Status Code or Return Value in Openbsd Openssh

CVE-2026-123158 "sshole" — Lab de estudo Laboratório local,...

ctf

CTF Related stuff Table of Contents The challs are linked in the table below. Description| Event/Game| Solution ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| An exe with a "login" functionality with the password in plain text in the memory. Blackbox| Level 2| An exe with setuid for...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619 — PHP session.uploadprogress LFI Exploit Alp...

Exploit for Unexpected Status Code or Return Value in Openbsd Openssh

CVE-2026-123158 sshole PoC educativo p...

CVE-2026-6042-PoC

CVE-2026-6042: Algorithmic Complexity DoS in musl libc iconv Gap-skipping loops in musl's iconv GB18030 4-byte decoder allow a small crafted input to consume disproportionate CPU time. A 40 KB adversarial payload can pin a CPU core for over 40 minutes. Advisory :...

CVE-2026-31431-live-code-corruption

CVE-2026-31431 — Live Code Corruption via Page Cache A novel exploitation technique for CVE-2026-31431 "Copy Fail" that corrupts executable code of running processes through the Linux kernel's page cache, achieving root privilege escalation. What's Different All published exploits for this CVE...

CVE-2015-7547-Research

Initial work on glibc exploit CVE-2015-7547. Currently just returns to libc and calls system to provide a shell. This version does not account for ASLR yet...

SUSE CVE-2026-123158

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass related to misinterpretation of whether a string is intended to be a password hash. For some configurations of accounts, any password between 256 and 1024 characters...

CVE-2026-123158

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass related to misinterpretation of whether a string is intended to be a password hash. For some configurations of accounts, any password between 256 and 1024 characters...

CVE-2026-123158

🔐 CVE-2026-123158 — SSHhole OpenSSH Password Authentication Bypass via musl libc Security Research • Vulnerability Analysis • Defensive Testing 📌 Overview CVE-2026-123158 , also known as SSHhole , is a password authentication bypass vulnerability affecting OpenSSH servers running on certain Linux...

K000164144: OpenSSH vulnerability CVE-2026-123158

Security Advisory Description sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass related to misinterpretation of whether a string is intended to be a password hash. For some configurations of accounts, any password...

Vulnerability fixed in OpenSSH by the OpenSSH Project

The OpenSSH project has addressed a vulnerability in sshd on OpenSSH versions older than 10.6p2. The vulnerability affects Linux systems that use musl libc and do not employ PAM. It involves bypassing SSH password authentication when using passwords with lengths ranging from 257 to 1024 bytes. Th...

OpenSSH: Auth Bypass

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass related to misinterpretation of whether a string is intended to be a password hash. For some configurations of accounts, any password between 256 and 1024 characters...

OpenSSH < 10.6p2 Authentication Bypass

The version of OpenSSH installed on the remote host is prior to 10.6p2. It is, therefore, affected by an authentication bypass vulnerability as referenced in the release-10.6p2 advisory. - sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a passwor...

Linux Distros Unpatched Vulnerability : CVE-2026-123158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass related to misinterpretation...

VulnCheck KEV: CVE-2026-123158

OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass...

CVE-2026-123158

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass related to misinterpretation of whether a string is intended to be a password hash. For some configurations of accounts, any password between 256 and 1024 characters...