cve-2016-0728-testbed

Banco di prova CVE-2016-0728 Questa repository contiene un programma di test per CVE-2016-0728, un bug di refcount leak e overflow in Linux, che porta a un use-after-free. Il bug è stato trovato e spiegato da Perception Point. Non sono affiliato a loro. Utilizzo root@kitploit: Welcome to the...

php-bypass-disable-functions

php-bypass-disable-functions Progetto dimostrativo su come bypassare il controllo di sicurezza disablefunctions di PHP su Linux, dove i processi possono ispezionare e persino scrivere la propria memoria tramite il file speciale /proc/self/map mediante operazioni standard sui file...

CVE-2025-6019_Exploit

CVE-2025-6019Exploit Primo passo: esegui 1.sh su un dispositivo Linux per costruire xfs.image Secondo passo: trasferisci xfs.image sul dispositivo vittima ed esegui 2.sh. Di seguito un esempio di successo: root@kitploit: neko@aosc-neko205 tmp $ bash 2.sh 当前用户: neko uid=1000neko gid=1001neko...

EUVD-2026-66496

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

EUVD-2026-66477

In the Linux kernel, the following vulnerability has been resolved: gpio: ml-ioh: use rawspinlockt for the register lock iohirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger -...

EUVD-2026-66454

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

EUVD-2026-66449

In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfsdqgetnextid xfsdqgetnextid takes the quota inode ILOCK before calling xfsireadextents. If xfsireadextents fails, the function returns immediately without releasing the lock, leaking the quota...

source-packages

source-packages Questo repository contiene il codice sorgente di programmi vulnerabili per LinuxFlaw...

linux-4.19.72_CVE-2021-3347

HiSax is a Linux hardware-level driver for passive ISDN cards with Siemens chipset ISACS 2085/2086/2186, HSCX SAB 82525. It is based on the Teles driver from Jan den Ouden. It is meant to be used with isdn4linux, an ISDN link-level module for Linux written by Fritz Elfert. root@kitploit: This...

linux-4.19.72_CVE-2020-25705

Kernel Linux Ci sono diverse guide per sviluppatori e utenti del kernel. Queste guide possono essere rese in diversi formati, come HTML e PDF. Si prega di leggere prima il file Documentation/admin-guide/README.rst. Per costruire la documentazione, usa make htmldocs o make pdfdocs. La documentazio...

specterops-k8s-red-teamers-libvirt-patch

Patch Libvirt per Kubernetes for Red Teamers di SpecterOps Una patch non ufficiale per libvirt e QEMU/KVM per il corso gratuito Kubernetes for Red Teamers di SpecterOps. Gli indirizzi di rete originali, la topologia Kubernetes, i callback Mythic e il comportamento del laboratorio rimangono...

CVE-2024-47076

CUPS Common UNIX Printing System, il sistema di stampa dei sistemi Linux e Unix, è un servizio che riguarda la gestione della stampa su questi sistemi e la distribuzione dei compiti tra i dispositivi. Su questo servizio è stata divulgata una vulnerabilità di sicurezza denominata CVE-2024-47076...

CVE-2026-80588

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. Errors occurring during the receive path, before data is queued, may prevent the system from reclaiming forward-allocated memory. This can lead to an unbounded increase in memory usage under certain network conditions, suc...

CVE-2026-80552

A flaw was found in the s390/vfioccw component of the Linux kernel. This vulnerability occurs because the system fails to properly validate index ranges for read/write operations on existing regions. This oversight could allow an attacker to perform out-of-bounds memory access, potentially leadin...

CVE-2026-80560

A flaw was found in the Linux kernel, specifically within the openrisc architecture's signal handling. An unprivileged local attacker can exploit a vulnerability in the restoresigcontext function by crafting a malicious signal frame. This allows the attacker to disable the Data Memory Management...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Script Bash per verificare CVE-2022-0847 Dirty Pipe Sommario Questa è la storia di CVE-2022-0847, una vulnerabilità nel kernel Linux dalla versione 5.8 che consente di sovrascrivere dati in file arbitrari di sola lettura. Ciò porta a un'escalation dei privilegi...

CVE-2026-74745

A flaw was found in the Linux kernel's bnxt Ethernet driver. This vulnerability could allow a local attacker to cause a system deadlock. The deadlock occurs when the driver attempts to unregister an IRQ affinity notifier while holding a lock that is also required by the notifier's callback, leadi...

CVE-2026-80549

A flaw was found in the Linux kernel's s390/vfioccw component. When a device is lost, the fsmnotoper routine performs cleanup while potentially holding other locks, such as the cio subchannel lock. This improper handling of resource cleanup in an asynchronous context could lead to a deadlock,...

CVE-2026-80561

A flaw was found in the Linux kernel's libceph component. A malicious or compromised Object Storage Device OSD can exploit multiple unsafe decode operations within the decodelocker function. This can lead to slab-out-of-bounds reads, potentially allowing an attacker to disclose sensitive...

CVE-2026-80548

A flaw was found in the Linux kernel's s390/vfioccw component. The iomutex was not sufficiently expanded to serialize I/O operations, which could lead to race conditions. These race conditions could result in unexpected system behavior or instability...