bazad5

bazad5 Lokale Privilegienausweitung für OS X 10.10.5 über CVE-2016-1828...

CVE-2026-78553

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

CVE-2017-5487

CVE-2017-5487 è una vulnerabilità nel kernel Linux scoperta e divulgata nel 2017. La vulnerabilità permette a un attaccante locale di ottenere accesso root a un sistema sfruttando una condizione di competizione nel sottosistema di gestione delle chiavi del kernel. La vulnerabilità può essere...

Eneio64-LPE

Apre un handle al driver vulnerabile 2. Mappa la memoria fisica nello spazio utente 3. Apre un handle al processo System 4. Interroga la tabella SystemHandleInformation del processo corrente per l'handle di sistema ottenuto, divulgando il suo indirizzo EPROCESS. 5. Attraversa il flink di...

winmagic_sd

Technical Write-up on CVE-2020-11519 and CVE-2020-11520 Data: Junho de 2020 Autor: Dennis Elser código: github Índice Introdução Abordagem e Descrição Técnica CVE-2020-11519 CVE-2020-11520 Exploit de Prova-de-Conceito Cronograma de Divulgação Solução Checksums Referências Introdução De acordo com...

MiniPlasma

MiniPlasma Dopo aver reinvestigato la tecnica utilizzata in GreenPlasma in particolare SetPolicyVal, risulta che cldflt!HsmOsBlockPlaceholderAccess è ancora vulnerabile allo stesso identico problema segnalato a Microsoft 6 anni fa. Non prendo tutto il merito per questo, James Forshaw di Google...

sudo_patch_CVE-2025-32463

sudopatchCVE-2025-32463 Mr.CIA's manueller Patch-Leitfaden für CVE-2025-32463 lokale Privilegienausweitung von Sudo, getestet auf Kali Linux und Ubuntu WSL. CVE-2025-32463 Sudo Patch-Anleitung 🛡️ Eish, CVE-2025-32463 ist eine fiese lokale Privilegienausweitung CVSS 9.3 in Sudo 1.9.14–1.9.17,...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: net: openvswitch: reject oversized nested action attrs

A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a loc...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

CVE-2026-46242

CVE-2026-46242 — „Bad Epoll" Dieses Repository ist ein Bad-Epoll-Validator für aarch64-Kernel, basierend auf einem Exploit, der für x86 bereits existiert. Linux Kernel Local Privilege Escalation durchepoll Use-After-Free Race Condition Feld| Detail ---|--- CVE| CVE-2026-46242 Spitzname| Bad Epoll...

CVE-2022-32250-LPE

CVE-2022-32250-LPE Exploit LPE per CVE-2022-32250 - una vulnerabilità Use-After-Free in netfilter. Il mio write-up della vulnerabilità: Conquistare un Use-After-Free in nftables: Analisi Dettagliata e Sfruttamento di CVE-2022-32250 Compilazione La compilazione richiede libmnl e libnftnl...

yc-mk8s-sctphantom-mitigation

SCTPhantom Mitigation for Yandex Managed Kubernetes Applicazione automatica della mitigazione per la vulnerabilità CVE-2026-64564 SCTPhantom nel kernel Linux su tutti i worker node del cluster Yandex Managed Kubernetes. Descrizione della vulnerabilità Identificatore CVE CVE ID: CVE-2026-64564 Lin...

CVE-2020-14974

CVE-2020-14974 Ein einfacher POC, der eine Schwachstelle in IObitUnlocker 1.1.2 demonstriert, die IOCTL-Codes im anfälligen Treiber IObitUnlocker.sys nutzt, und es einem Benutzer mit niedrigen Rechten ermöglicht, laufende Dateien zu entsperren, zu löschen, umzubenennen, zu kopieren und zu...

pwnkit_safety_check

Was ist PwnKit PwnKit nutzt eine Schwachstelle im SUID-root-Programm /usr/bin/pkexec aus, die es unprivilegierten Benutzern ermöglicht, auf Linux-Systemen vollständige Root-Rechte zu erlangen. Diese Schwachstelle existiert seit 2009 und wurde im Januar 2022 öffentlich bekannt gegeben...

throttlestop-exploit-rw

Mappatore di Memoria Fisica Strumento di ricerca che dimostra l'accesso alla memoria fisica tramite la combinazione della traduzione di indirizzi virtuali-fisici con lo sfruttamento di driver vulnerabili. Panoramica Questo progetto esplora la gestione della memoria a basso livello di Windows...