CVE-2026-62847

The Metalama toolkit (specifically Metalama.Framework and Metalama.Tool ) is vulnerable to local code execution via DLL planting on Linux and macOS systems. The root cause is the use of predictable, world-writable temporary directories (via Path.GetTempPath()) to store and execute compile-time as...

CVE-2026-62847 Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded helper assemblies from predictable temporary...

CVE-2026-62847 Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded helper assemblies from predictable temporary...

EUVD-2026-114452

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded helper assemblies from predictable temporary...

CVE-2026-64531

🔥 CVE-2026-64531 — OVSwrap Linux Kernel Open vSwitch Memory Corruption 🩸 Vulnerability Overview CVE-2026-64531 is a security vulnerability affecting the Linux Kernel Open vSwitch OVS networking subsystem. The flaw exists in the handling of Netlink nested attributes , where oversized action...

InfraPulse-Core

InfraPulse-Core InfraPulse-Core is a unified, dual-platform security auditing architecture implementing single-file, zero-dependency engines for Linux POSIX and Windows Win32. Unlike traditional vulnerability scanners that rely on subjective risk metrics, InfraPulse-Core enforces an unyielding...

Mandating-Honeypots-Project

Mandating-Honeypots-Project As laws like the Parents Decide Act H.R.8250 and California's Digital Age Assurance Act Assembly Bill 1043 move through legislative bodies, privacy, anonymity, and data security becomes laden with systemic threats and new security architecture with unexamined attack...

CVE-2026-52924

. CVE-2026-52924: SCTP Use-After-Free in Stale Cookie Handling Vulnerability Summary CVE ID: CVE-2026-52924 Severity: CRITICAL CVSS 9.8 Component: Linux Kernel - SCTP Stream Control Transmission Protocol Type: Use-After-Free CWE-416, CWE-825 Published: 2026-06-24 Status: Fixed Affected Versions...

CVE-2022-0847-Linux

CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. - create by antx at 2022-03-08. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later...

IT19115276

IT19115276 SNP Assignment 1 Report - Linux box exploitation Vulnerability CVE-2014-0038 I have explained about how to exploit this vulnerability with screenshots...

Exploit for CVE-2026-98432

Check, mitigate, rollback Patch-state and exposure check for...

2008

2008 Linux Kernel Exploits - CVE-2008-0600 + CVE-2008-0900 + CVE-2008-4210...

CVE-2017-7308

CVE-2017-7308 CVE ID: CVE-2017-7308 Publish date: 2017-03-29T20:59:00.373 Base score CVSS 3.0/3.1: 7.8 Description: The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial...

portclue

PortClue PortClue explains why a TCP port on a Linux machine may or may not be reachable. It turns socket, process, firewall, and Docker state into a short evidence chain instead of making you correlate ss, /proc, nftables, iptables, and docker inspect by hand. Run it without a port to discover...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...

CVE-2026-46300_Fragnesia

🧨 Fragnesia — CVE-2026-46300 Linux Kernel LPE Audit & Exploit Toolkit · Page-Cache / XFRM ESP-in-TCP espintcp Regression Interactive audit → LPE prerequisite detection → Automated exploit execution after confirmation ⚠️ Ethical & Legal Warning This tool is intended solely for legitimate and...

CVE-2022-0847-DirtyPipe

title: CVE-2022-0847 DirtyPipe Local Privilege Escalation Vulnerability Analysis date: 2022-03-08 14:41:20 tags: - Linux Privilege Escalation categories: - Security Research Vulnerability Description CVE-2022-0847 is a vulnerability in the Linux kernel since version 5.8, allowing an attacker to...

linux-apache-fix-mod_rewrite-spaceInURL

FIX linux Ubuntu Apache modrewrite space In URL After the last Apache Upgrade, I've had some issues with "spaces in URL" in modrewrite. 2023-04-25 - upgrade apache2:amd64 2.4.38-3+deb10u9 2.4.38-3+deb10u10 The URLs that contain "space" and have been replaced with %20 start to return error 403 by...

Exploit for CVE-2026-98432

CVE-2026-98432 Written by DeepSeek. A plain IPv4 TCP ser...

CVE-2025-38502-Linux-LPE

Abraxas Labs · abraxaslabs.tech · github.com/abraxas · @abraxasnull CVE-2025-38502 Write-up: https://abraxaslabs.tech/research/CVE-2025-38502 Linux kernel BPF cgroup local storage out-of-bounds access via tail calls | ---|--- CVE| CVE-2025-38502 CWE| CWE-125 — Out-of-bounds Read Vendor| Linux...