copy.fail-mitigation-MLM

Create a new configuration channel State Channel in Multi-Linux Manager using the code from the copy-fail.sls file. Assign the config channel to all your machines and run it, or execute Highstate. This is a temporary fix!...

libXrender security update

An update is available for libXrender. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org X11 libXrender runtime library Security Fixes: libXrender: libXrende...

libXtst security update

An update is available for libXtst. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org X11 libXtst runtime library Security Fixes: libXtst: libXtst: Denial of...

iptable_evil

iptableevil iptableevil is a very specific backdoor for iptables that allows all packets with the evil bit set, no matter the firewall rules. The initial implementation is in iptableevil.c, which adds a table to iptables and requires modifying a kernel header to insert a spot for it. The second...

python-urllib3 security update

An update is available for python-urllib3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

brotli security update

An update is available for brotli. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Brotli is a generic-purpose lossless compression algorithm that compresses dat...

wtf

what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...

mcpjam-to-root

⚠️ Disclaimer This repository is intended for authorized security research, penetration testing, and educational purposes only. Do not use the techniques described here against systems without explicit authorization. ⚡ MCPJam → Root From MCPJam Inspector RCE to root — CVE-2026-23744, JupyterLab...

Startup-SBOM

Startup-SBOM What runs at boot, what it is made of, and how it can be attacked. Read the documentation → Startup-SBOM statically analyses a Linux root filesystem, container or image and answers three questions most SBOM tools can't: 1. Vulnerability → threat. Not "openssl has 14 CVEs", but "an...

CVE-2022-2586-LPE

CVE-2022-2586-LPE LPE N-day Exploit for CVE-2022-2586: Linux kernel nftobject UAF gcc exploit.c -o exploit -lmnl -lnftnl -no-pie -lpthread Author: Alejandro Guerrero [email protected] Copyright C 2022 Qualys, Inc...

CVE-2026-31431-exp

Adapted from https://github.com/theori-io/copy-fail-CVE-2026-31431. Added payload encryption and obfuscation, cache write-back to improve system stability, adaptive chunking, zero dependencies, multi-architecture support x86, arm, i386, etc., and other features. In theory, it can be exploited on...

CVE-2021-4034

Run the following commands on a vulnerable Linux machine in the directory where the c file is present and it should give you root access. $ gcc CVE-2021-4034.c -o exploit $ ./exploit whoami root...

dirtycow-vdso

0xdeadbeef PoC for Dirty COW CVE-2016-5195. This PoC relies on ptrace instead of /proc/self/mem to patch vDSO. It has a few advantages over PoCs modifying filesystem binaries: no setuid binary required SELinux bypass container escape no kernel crash because of filesystem writeback And a few cons:...

sigwire

sigwire tail -f for signals. Every signal any process on the box raises — who sent it, who it hit, which signal, how it was raised kill2, the kernel, a POSIX timer, whether the target caught it and how long its handler ran, whether it tore a blocked syscall out with EINTR — decoded off the kernel...

CVE-2009-2692

CVE-2009-2692 Linux Null pointer dereference This is just the compiled binary of the code available in https://www.exploit-db.com/exploits/9545/ Compiled for education purposes It was compiled under CentOS 4.8...

Singularity

Singularity - Stealthy Linux Kernel Rootkit "Shall we give forensics a little work?" Singularity is a powerful Linux Kernel Module LKM rootkit designed for modern 6.x kernels. It provides comprehensive stealth capabilities through advanced system call hooking via ftrace infrastructure. Full...

CVE-2022-32250

CVE-2022-32250 This is my exploit for CVE-2022-32250, written entirely based on the research from NCC Group's blog. Tested on: Kernel version 5.13 Success rate: 70% Building Building requires libmnl and libnftnl. make all Disclaimer The Proof-of-Concept and the write-up of the vulnerability are f...

CVE-2023-47268

PrusaSlicer Arbitrary Code Execution Priv Esc using a .3mf file with vulnerable prusaslicer version. Make sure you can run prusaslicer using sudo. Linux 1.Download the files 2.Change IP and PORT in exploit.sh 3.Make sure to have exploit.sh on /tmp directory 4.Execute the following command sudo...

copy-fail-cve-2026-31431

Copy Fail - CVE-2026-31431 This repository provides a Go port of the public Copy Fail PoC and a reproducible build pipeline for multi architecture Linux binaries. Copy Fail CVE-2026-31431 is a Linux kernel logic flaw in authencesn that enables a deterministic 4 byte write into page cache data...

CVE-2026-109618-109619-audit

CVE-2026-109618 / CVE-2026-109619 Audit of the "php2shell" claims, plus one working local PoC. 中文 · PHP 8.5.4 · lab-only MITRE: CVERECORDDNE · NVD: no record · php.net: pre-announcement only. This repo audits the technical claims; it does not confirm the identifiers. 30-second verdict Question|...