CVE-2017-16995

Descrizione della vulnerabilità Ubuntu è un sistema operativo GNU/Linux open source principalmente per desktop, basato su Debian GNU/Linux. Recentemente, un white hat ha scoperto che l'ultima versione di Ubuntu Ubuntu 16.04 presenta una vulnerabilità di escalation dei privilegi locali, con numero...

CVE-2022-0847

Informationen root@kitploit: Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Date: 03/07/2022 Exploit Author: Max Kellermann Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847...

CVE-2022-0847-POC

CVE-2022-0847 QUELLEN: root@kitploit: Autor der Sicherheitslücke: Max Kellermann Erklärung von Max Kellermann: https://dirtypipe.cm4all.com/ RESSOURCEN: root@kitploit: SEITENPUFFER: https://manybutfinite.com/post/page-cache-the-affair-between-memory-and-files/ PIPE:...

cve-2017-8890-msf

Modulo: Phoenix Talon CVE 2017-8890 Questo potrebbe risolvere il problema 8571, che richiede moduli Phoenix Talon. Panoramica di 2017-8890 Questo CVE: è il membro più grave della classe di vulnerabilità Phoenix Talon del kernel Linux. Nessun POC di questo CVE esiste nell'Exploit DB. Ma altri POC...

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project Il progetto documenta il completamento e l'analisi del laboratorio TryHackME Fragnesia CVE-2026-46300, che dimostra una vulnerabilità di corruzione della cache delle pagine del kernel Linux in grado di ottenere l'escalation dei privilegi locali...

LINUX-VULNERABILITY-CVE-2015-1328

Questo repository non contiene un README...

CVE-2015-1328

CVE-2015-1328 Prova di concetto Un exploit di prova di concetto PoC per CVE-2015-1328, una vulnerabilità di escalation dei privilegi che colpisce l'implementazione overlayfs del kernel Linux. Questa vulnerabilità consente a utenti locali non privilegiati di ottenere accesso root sfruttando...

CVE-2021-38647

CVE-2021-38647 CVE-2021-38647 – POC zur Ausnutzung von nicht authentifiziertem RCE OMIGOD auf Azure UNIX/Linux-VMs! Details In Microsofts Azure wird die OMI-Anwendung automatisch installiert, wenn Dienste wie Azure Automation Accounts, Update Management, Log Analytics, Configuration Management us...

CVE-2017-7308

CVE-2017-7308 CVE-ID: CVE-2017-7308 Veröffentlichungsdatum: 2017-03-29T20:59:00.373 Basis-Score CVSS 3.0/3.1: 7.8 Beschreibung: Die Funktion packetsetring in net/packet/afpacket.c im Linux-Kernel bis 4.10.6 validiert bestimmte Blockgrößendaten nicht ordnungsgemäß, was lokalen Benutzern ermöglicht...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

Door404

Door404 Door404 è un progetto Open Source sviluppato daMrSqar e Rizer Questo progetto è sviluppato per 2 motivi Primo " Aiutare i principianti a imparare a programmare. " Secondo " Aiutare i nuovi gestori di server a imparare nuovi trucchi di protezione " Requisiti PHP PHP CUrl Sistema Operativo...

CVE-2026-58093

The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An...

copyfail-deconstructed

copyfail-deconstructed CVE-2026-31431 का आसानी से समझ में आने वाला संस्करण, एक विशेषाधिकार वृद्धि तकनीक जो किसी को भी रूट बनने की अनुमति देती है। मूल प्रूफ-ऑफ-कॉन्सेप्ट यहाँ पाया जाता है: https://github.com/theori-io/copy-fail-CVE-2026-31431, लेकिन इसे काफी संकुचित और छोटा किया गया है ताकि इसका...

kernel: netfilter: require Ethernet MAC header before using eth_hdr()

A flaw was found in the Linux kernel's netfilter component. Certain netfilter modules, including ip6teui64 and xtmac, accessed Ethernet MAC header data without first verifying that an Ethernet device was associated with the network packet or that the MAC header was present and of sufficient lengt...

kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

A flaw was found in the Linux kernel's netfilter component, specifically within the nftsetpipapoavx2 AVX2 matching functions. This vulnerability occurs when a pipapo set with an 'ipv4 . port' key is reloaded. Due to incorrect masking, the system may erroneously identify non-matching elements as...

kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write t...

kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item

A resource exhaustion vulnerability was found in the Kernel Same-page Merging KSM subsystem of the Linux kernel. When scanning processes with large sparse virtual memory mappings e.g., 32 TiB with one mapped page, ksmd inefficiently walks every address rather than skipping unmapped holes. This...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

kernel: netfilter: ipset: fix race between dump and ip_set_list resize

A flaw was found in the Linux kernel's netfilter ipset component. A race condition exists between the ipsetlist resize operation and dump operations. This can lead to a use-after-free vulnerability, where memory is accessed after it has been deallocated. A successful exploitation of this flaw cou...

kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: use skbvlaninetprepare in ip6tnlrcv Blamed commit did not take care of VLAN encapsulations as spotted by syzbot 1. Use skbvlaninetprepare instead of pskbinetmaypull. 1 BUG: KMSAN: uninit-value in INETECNdecapsulate...