CVE-2017-7308

CVE-2017-7308 CVE ID: CVE-2017-7308 Publish date: 2017-03-29T20:59:00.373 Base score CVSS 3.0/3.1: 7.8 Description: The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial...

portclue

PortClue PortClue explains why a TCP port on a Linux machine may or may not be reachable. It turns socket, process, firewall, and Docker state into a short evidence chain instead of making you correlate ss, /proc, nftables, iptables, and docker inspect by hand. Run it without a port to discover...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...

CVE-2026-46300_Fragnesia

🧨 Fragnesia — CVE-2026-46300 Linux Kernel LPE Audit & Exploit Toolkit · Page-Cache / XFRM ESP-in-TCP espintcp Regression Interactive audit → LPE prerequisite detection → Automated exploit execution after confirmation ⚠️ Ethical & Legal Warning This tool is intended solely for legitimate and...

CVE-2022-0847-DirtyPipe

title: CVE-2022-0847 DirtyPipe Local Privilege Escalation Vulnerability Analysis date: 2022-03-08 14:41:20 tags: - Linux Privilege Escalation categories: - Security Research Vulnerability Description CVE-2022-0847 is a vulnerability in the Linux kernel since version 5.8, allowing an attacker to...

linux-apache-fix-mod_rewrite-spaceInURL

FIX linux Ubuntu Apache modrewrite space In URL After the last Apache Upgrade, I've had some issues with "spaces in URL" in modrewrite. 2023-04-25 - upgrade apache2:amd64 2.4.38-3+deb10u9 2.4.38-3+deb10u10 The URLs that contain "space" and have been replaced with %20 start to return error 403 by...

Exploit for CVE-2026-98432

CVE-2026-98432 Written by DeepSeek. A plain IPv4 TCP ser...

CVE-2025-38502-Linux-LPE

Abraxas Labs · abraxaslabs.tech · github.com/abraxas · @abraxasnull CVE-2025-38502 Write-up: https://abraxaslabs.tech/research/CVE-2025-38502 Linux kernel BPF cgroup local storage out-of-bounds access via tail calls | ---|--- CVE| CVE-2025-38502 CWE| CWE-125 — Out-of-bounds Read Vendor| Linux...

remediate_cesa_2019_2091

cesa20192091 This module contains a Bolt Task that will remediate CVEs described in CESA-2019:2091 and parallel issues present on other Enterprise Linux 7 EL7 platforms. Table of Contents 1. Description 2. Setup - The basics of getting started with cesa20192091 Beginning with cesa20192091 3. Usag...

linux-4.19.72_CVE-2020-27815

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2012-1495-Webcalendar-

CVE-2012-1495-Webcalendar- Prerequisites : Kali Linux or Parrot OS machine 1- Clone the repository 2- Extract the archive "webcalendar" 3- Create the Docker container and launch it using the commands: docker build -t webcalendar . docker run -d -p 80:80 webcalendar 4- On your Kali machine, launch...

SG-2026-0024

Dirty Frag primitive-only PoC Readable N4C demonstrator for CVE-2026-43284 XFRM/ESP and CVE-2026-43500 RxRPC/RXKAD. The PoC answers one question: can an unprivileged process change the page cache of a root-owned, read-only file through a sharedskbuff fragment? It does not overwrite /usr/bin/su or...

quipu

Quipu A desktop workbench for writing, validating, compiling, and testing YARA rules. Quipu pronounced “KEE-poo” brings a project explorer, a YARA-aware editor, the YARA-X compiler, and focused scan results into one local application. It embeds both YARA-X and its language server, so you do not...

CVE-2025-32463

CVE-2025-32463 Exploit This is the exploit for the CVE-2025-32463 Thanks to Rich Mirch @0xm1rch on X @ Stratascale for reporting this amazing vulnerability. Original Post: Vulnerability Advisory: Sudo chroot Elevation of Privilege NVD: CVE-2025-32463 CVSS 9.3 Affected Versions Vulnerable builds o...

cve-2026-31431

CVE-2026-31431 — Linux Kernel algifaead "Copy Fail": Analysis Security research on CVE-2026-31431 CVSS 3.1 7.8 HIGH , AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H: three composable design flaws in the AFALG AEAD interface chain into a deterministic, race-free 4-byte page-cache write at any offset of any...

linux-4.19.72_CVE-2023-35828

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

dirtycow-lab

dirtycow-lab Dirty COW vulnerability exploitation CVE-2016-5195 on Ubuntu 16.04.1. cat README.md :/. 4. Execution and escalation : chmod +x /dirty && /dirty → su root pass dirtyCowFun. 5. Flag : cat /root/flag.txt → 4GEEKSY0uG0tR00t. ✅ Result root@ubuntu:/home/student whoami root...

linux-4.1.15_CVE-2023-4128

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

yara-rules

yara-rules Collection of YARA signatures from recent malware research Ruleset Dacls Trojan Rule: DaclsLinux.yara Rule: DaclsWindows.yara Reference: https://blog.netlab.360.com/dacls-the-dual-platform-rat/ APT32 KerrDown Rule: APT32KerrDown.yara Reference:...

CVE-2020-8250

CVE-2020-8250: Privilege Escalation via Command Injection in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely passes the “HOME” environmental variable to “system”. By altering the “HOME” variable to contain special shell characters Ex: “” or...