CVE-2026-80560

A flaw was found in the Linux kernel, specifically within the openrisc architecture's signal handling. An unprivileged local attacker can exploit a vulnerability in the restoresigcontext function by crafting a malicious signal frame. This allows the attacker to disable the Data Memory Management...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Script Bash per verificare CVE-2022-0847 Dirty Pipe Sommario Questa è la storia di CVE-2022-0847, una vulnerabilità nel kernel Linux dalla versione 5.8 che consente di sovrascrivere dati in file arbitrari di sola lettura. Ciò porta a un'escalation dei privilegi...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits Questo repository offre una raccolta completa di exploit e documentazione, progettata specificamente per penetration tester e professionisti del red team. Costituisce una risorsa preziosa per coloro che mirano a sfruttare efficacemente la vulnerabilità Linux Dirty...

CVE-2026-74745

A flaw was found in the Linux kernel's bnxt Ethernet driver. This vulnerability could allow a local attacker to cause a system deadlock. The deadlock occurs when the driver attempts to unregister an IRQ affinity notifier while holding a lock that is also required by the notifier's callback, leadi...

CVE-2026-80549

A flaw was found in the Linux kernel's s390/vfioccw component. When a device is lost, the fsmnotoper routine performs cleanup while potentially holding other locks, such as the cio subchannel lock. This improper handling of resource cleanup in an asynchronous context could lead to a deadlock,...

CVE-2026-80561

A flaw was found in the Linux kernel's libceph component. A malicious or compromised Object Storage Device OSD can exploit multiple unsafe decode operations within the decodelocker function. This can lead to slab-out-of-bounds reads, potentially allowing an attacker to disclose sensitive...

CVE-2026-80548

A flaw was found in the Linux kernel's s390/vfioccw component. The iomutex was not sufficiently expanded to serialize I/O operations, which could lead to race conditions. These race conditions could result in unexpected system behavior or instability...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 ha esposto una backdoor nella libreria di compressione XZ, consentendo l'accesso SSH remoto eludendo l'autenticazione. Si tratta di un grave attacco alla supply chain che colpisce i sistemi Linux, evidenziando i rischi nei componenti open source fidati. La backdoor XZ:...

CVE-2022-0847-Docker

Dirty Pipe CVE-2022-0847: Dimostrazione Pratica di un Exploit in Docker Questo repository fornisce un ambiente Docker interattivo e autonomo per dimostrare e analizzare in sicurezza la vulnerabilità di escalation dei privilegi "Dirty Pipe". È progettato come strumento educativo per i professionis...

CVE-2026-80579

A flaw was found in the Linux kernel's fbdev component. A local user could exploit a use-after-free vulnerability by manipulating video modes. When a mode is deleted, the fbinfo-mode pointer might not be cleared, leading to a stale pointer dereference during subsequent system file system sysfs...

CVE-2026-80574

A flaw was found in the Linux kernel's focaltech input driver. This vulnerability occurs in the focaltechprocessrelpacket function, where incorrect handling of input can lead to an array out-of-bounds write. This memory corruption issue could potentially allow an attacker to cause system...

CVE-2026-80551

A flaw was found in the Linux kernel's s390/vfioccw component. This vulnerability arises because the system does not ensure that the address in the first Indirect Data Address Word IDAW remains constant between reads. An attacker could potentially exploit this to cause the system to operate with ...

nvidia-gpu-security-poc

NVIDIA GPU-Treiber — zwei Findings, die NVIDIA als erwartetes Verhalten geschlossen hat Proof-of-Concept-Code und rohe Beweise für zwei Findings im NVIDIA Linux GPU-Treiber, beide über NVIDIAs VDP gemeldet und beide von NVIDIA als beabsichtigt/erwartetes Verhalten geschlossen. Veröffentlicht, dam...

dirtyclone-CVE-2026-43503

CVE-2026-43503 — DirtyClone Scalata di privilegi locale su Linux. Un skbuff clonato perde il flag SKBFLSHAREDFRAG, quindi la decifratura ESP in-place scrive nella memoria della cache delle pagine supportata da file. Il PoC modifica /etc/passwd in cache per iniettare un account con uid 0 e fornisc...

CVE-2019-5489

CVE 2019-5489 इस रिपॉजिटरी में Linux के लिए Page Cache Side Channel Attacks CVE-2019-5489 का प्रूफ ऑफ कॉन्सेप्ट है। पेज कैश साइड चैनल का मूल्यांकन करने के लिए, मैंने दो प्रक्रियाओं के बीच कोवर्ट चैनल लागू किया है। सेंडर प्रक्रिया पेज कैश साइड चैनल के माध्यम से रिसीवर प्रक्रिया को गोपनीय डेटा भेजत...

CVE-2018-3639

CVE-2018-3639 Bypass speculativo del negozio CVE-2018-3639 proof of concept per Linux Scarica root@kitploit: git clone [email protected]:mmxsrup/CVE-2018-3639.git Compila root@kitploit: cd CVE-2018-3639 make Esegui root@kitploit: ./specter Output root@kitploit: $ ./spectre idx: 0, highest:P,...

Dirty-Pipe-Exploit

Dirty-Pipe-Exploit O exploit Dirty Pipe CVE-2022-0847 é uma vulnerabilidade do kernel Linux v5.8+ que permite a atacantes sem privilégios sobrescrever arquivos arbitrários por meio de uma falha no mecanismo de pipes. Isso leva à escalada de privilégios, concedendo acesso root. Semelhante ao Dirty...

CVE-2022-34918-LPE-PoC

CVE-2022-34918 LPE PoC Exploit LPE per CVE-2022-34918. Questo exploit è stato scritto per il kernel Linux ubuntu 5.15.0-39-generic Puoi trovare il relativo write-up sul nostro blog Utilizzo getroot dovrebbe trovarsi nella cartella corrente root@kitploit: $ ls getroot poc $ ./poc...

CVE-2022-34918-LPE-PoC

CVE-2022-34918 LPE PoC Exploit LPE per CVE-2022-34918. Questo exploit è stato scritto per il kernel Linux ubuntu 5.15.0-39-generic Puoi trovare l'analisi dettagliata sul nostro blog Utilizzo getroot deve trovarsi nella cartella corrente root@kitploit: $ ls getroot poc $ ./poc...

CVE-2020-8250

CVE-2020-8250: Elevazione dei Privilegi tramite Iniezione di Comandi nel Client Linux Pulse Secure VPN L'eseguibile SUID di root pulsesvc ha una funzione "doupload" che passa in modo non sicuro la variabile d'ambiente "HOME" a "system". Alterando la variabile "HOME" per contenere caratteri specia...