Reproduce-CVE-2023-52927

पुनरुत्पादन-CVE-2023-52927 लक्ष्य kCTF cos-109-17800.436.33 मशीन: कर्नेल इमेज bzImage: https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/bzImage कर्नेल इमेज vmlinux: https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/vmlinux.gz कर्नेल कॉन्फ़िग:...

CVE-2021-4034

CVE-2021-4034 PoC CVE 2021-4034 PwnKit: Vulnerabilità di Escalation dei Privilegi Locali Scoperta in pkexec di polkit PoC Verificato su Kali. root@kitploit: ┌──kali㉿kali-/Documents └─$ grep PRETTY /etc/os-release PRETTYNAME="Kali GNU/Linux Rolling" ──kali㉿kali-/Documents └─$ lsbrelease -a No LSB...

vulnerability-analysis-

Análise de Vulnerabilidade do Kernel Linux: CVE-2021-26708 Visão Geral Este repositório contém uma reprodução completa e análise da CVE-2021-26708 — uma vulnerabilidade de use-after-free causada por uma condição de corrida nas operações de socket AFVSOCK no kernel Linux v5.10.12. Todo o ambiente...

ZoneMinder Snapshots - Command Injection

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...

WAVLINK WN530H4 live_api.cgi - Command Injection

A remote command-line injection vulnerability in the /cgi-bin/liveapi.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication. id: CVE-2020-12124 info: name: WAVLINK WN530H4 liveapi.cgi - Command Injection author...

Chef Automate < 4.13.295 — SQL Injection

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...

1Panel SQL Injection - Authenticated

1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to...

Codeine

Codeine root@kitploit: .o88b. .d88b. d8888b. d88888b d888888b d8b db d88888b d8P Y8 .8P Y8. 88 8D 88' 88' 888o 88 88' 8P 88 88 88 88 88ooooo 88 88V8o 88 88ooooo 8b 88 88 88 88 88 88 88 V8o88 88 Y8b d8 8b d8' 88 .8D 88. .88. 88 V888 88. Y88P' Y88P' Y8888D' Y88888P Y888888P VP V8P Y88888P Codeine 是...

Y2S1-Project-Linux-Exploitaion-using-CVE-2016-5195-Vulnerability

Y2S1-Project-Linux-Exploitaion-using-CVE-2016-5195-Vulnerability सिस्टम शोषण मई 2021 • सिस्टम और नेटवर्क प्रोग्रामिंग मॉड्यूल के अंतर्गत एक शोध किया और एक प्रणाली का शोषण किया ताकि शोषणों और कमजोरियों के बारे में ज्ञान प्राप्त हो सके। • Linux प्रणालियों पर CVE-2016-5195 नामक कमजोरी की पहचान की और...

CVE-2026-64531

CVE-2026-64531 — OVSwrap PoC de escalonamento de privilégios local usuário comum → root no módulo Open vSwitch do kernel Linux. Utiliza o wraparound de inteiro do campo nlalen de 16 bits para elevar de usuário comum até root. Resumo da vulnerabilidade Quando o fluxo de actions aninhadas gerado pe...

kernel-sanitizers

Linux Kernel Sanitizers Hinweis: Die meisten Sanitizer werden im Linux-Kernel-Repository gepflegt und hier nicht gehostet. Dieses Repository enthält Out-of-Tree-Informationen und Prototypen für KASAN, UBSAN, KCSAN, KFENCE, KMSAN und KTSAN. Beachten Sie, dass der KMSAN-Code separat gehostet wird...

CVE-2026-43284---DirtyFrag-Analysis-THM-

TryHackMe — CVE-2026-43284: Dirty Frag Sala: CVE-2026-43284: Dirty Frag Categoria: Escalonamento de Privilégios no Linux Autor: Minha Página Visão Geral Dirty Frag é uma sala encadeada de escalonamento local de privilégios LPE no Linux, construída em torno do CVE-2026-43284. O objetivo é ir de um...

RefluxFS_CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Escalação Local de Privilégios no Kernel Linux LPE 📖 Visão Geral CVE-2026-64600 "RefluxFS" é uma vulnerabilidade do kernel Linux que afeta a implementação do sistema de arquivos RefluxFS. A falha decorre da validação inadequada de metadados do sistema de arquivos,...

januscape

Januscape — Tracking-Website für den Linux-KVM/x86-Guest-to-Host-Escape Quellcode für den Januscape -Patch-Status-Tracker: eine einseitige Website, die verzeichnet, welche Distributionen einen Fix für den KVM/x86-Guest-to-Host-Escape im Linux-Kernel ausgeliefert haben. Wo die Fakten zu finden sin...

rtl8812au

Driver wireless RTL8812AU/21AU e RTL8814AU Solo per uso con Linux e Android QUESTI DRIVER SONO DEPRECATI. Utilizza i driver mac80211 su https://github.com/lwfinger/rtw88 Importante! root@kitploit: Use "ip" and "iw" instead of "ifconfig" and "iwconfig" It's described further down, READ THE README!...

CVE-2021-26828_ScadaBR_RCE

POC CVE-2021-26828ScadaBRRemoteCodeExecution ScadaBR 0.9.1 su Linux e fino alle versioni 1.0 e 1.12.4CE su Windows consente agli utenti remoti autenticati di caricare ed eseguire file JSP arbitrari tramite 'viewedit.shtm' e l'esecuzione remota di codice. Utilizzo dell'exploit Comandi: Windows: $...

radmin-vpn-linux

Radmin VPN per Linux Esegui Radmin VPN su Linux tramite Wine. Unisciti a reti VPN, vedi i peer, gioca — tutto senza una VM Windows. Non l'ho creato perché fosse più facile di una VM. L'ho creato perché pensavo fosse più facile di una VM. Codice assistito dall'IA. Sviluppato in collaborazione tra ...

Diamorphine

Diamorphine Diamorphine ist ein LKM-Rootkit für Linux-Kernel 2.6.x/3.x/4.x/5.x/6.x x86/x8664 und ARM64 Funktionen Beim Laden ist das Modul unsichtbar; Jeden Prozess durch Senden von Signal 31 verstecken/einblenden; Durch Senden von Signal 63 an eine beliebige PID wird das Modul unsichtbar; Durch...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

fluxion

Fluxion ist die Zukunft von MITM-WPA-Angriffen Fluxion ist ein Remake von linset von vk496 mit hoffentlich weniger Fehlern und mehr Funktionalität. Es ist mit der neuesten Version von Kali rolling kompatibel. Die neuesten Builds stabil und Beta finden Sie hier hier...