CVE-2026-31431-Linux-Copy-Fail

CVE-2026-31431 - Exploit Copy-Fail Linux Rust Un'implementazione in Rust di un exploit di escalation dei privilegi locali per CVE-2026-31431 Copy-Fail. Consente di eseguire shellcode personalizzati come Meterpreter Introduzione Xint ha divulgato CVE-2026-31431, una vulnerabilità di scrittura...

CVE-2026-81572 Local Privilege Escalation in CodeMeter Runtime on Windows

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary...

EUVD-2026-66979

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary...

codeql-sample-polkit

-- coding: utf-8 - - Il bug di polkit pkexec Panoramica Questo repository esamina il bug di polkit pkexec usando CodeQL. Contiene istruzioni per la creazione dei database i database risultanti una sequenza di query che illustrano un approccio per trovare questo bug Questi sono stati completati: l...

CVE-2026-32223-USBPrint-Exploit

CVE-2026-32223: Plug me if you can: Ausnutzung von USB-Druckertreibern in Windows Heap-basierter Pufferüberlauf im Windows-USB-Druckertreiber usbprint.sys, der zu lokaler Rechteausweitung LPE führt Diese Schwachstelle wurde von ENKI WhiteHat entdeckt und gemeldet. Überblick CVE-2026-32223 ist ein...

CVE-2026-80575

A flaw was found in the Linux kernel. The cs40l50-vibra driver, responsible for haptic feedback, improperly validates the length of custom data provided by a local user. This insufficient validation can lead to out-of-bounds reads and accesses when processing specially crafted input. A local...

CVE-2021-4034-Linux

CVE-2021-4034 PoC für PwnKit: Lokale Privilegienausweitung-Schwachstelle in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

EUVD-2026-66475

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

EUVD-2026-66582

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...

CVE-2021-4034-Rust

CVE-2021-4034-Rust Linux-LPE mit polkit-1, geschrieben in Rust. Build-Anleitung Rust installieren, falls noch nicht geschehen root@kitploit: git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build --release...

Copy_Grail

copygrail | copy-fail-CVE-2026-31431 copygrail è un'implementazione C++ compatta e a file singolo della vulnerabilità di escalation dei privilegi locali CVE-2026-31431 "Copy Fail". Mostra una tecnica pulita di corruzione della page cache tramite AFALG + splice che può essere utilizzata per...

CVE-2021-4034

CVE-2021-4034 Ein einfacher Proof-of-Concept für CVE-2021-4034 lokale Rechteausweitung über pkexec. Basierend auf der hervorragenden Zusammenfassung unserer Freunde bei Qualsys. Wie geht das? 1. Klone dieses Repository auf eine Maschine mit einer verwundbaren Version von pkexec. 2. ./run.sh 3...

pkexec-lpe-poc

pkexec-lpe-poc POC per CVE-2021-4034 Writeup originale Per facilità d'uso, accetta un payload in file C invece di una shell hardcoded. utilizzo: root@kitploit: make ./poc payload.c testato su Ubuntu 20.04.3 LTS - Linux target 5.4.0-81-generic...

CVE-2026-74752

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. When cookie authentication is disabled, the system improperly validates authentication AUTH fields restored directly from peer-controlled cookie bytes. A local attacker could exploit this by forging RANDOM lengths o...

CVE-2026-41651

CVE-2026-41651 — PackageKit TOCTOU स्थानीय विशेषाधिकार वृद्धि वर्गीकरण: पर्पल टीम मूल्यांकन आर्टिफैक्ट केवल अधिकृत उपयोग के लिए। यह दस्तावेज़ और साथ में दी गई परीक्षण स्क्रिप्ट केवल उन प्रणालियों पर आंतरिक सुरक्षा सत्यापन के लिए हैं जहाँ लिखित प्राधिकरण प्राप्त किया गया है। शोषण का प्रमाण विषय-सू...

CVE-2021-4034-Pwnkit

CVE-2021-4034 PoC per PwnKit: Vulnerabilità di escalation dei privilegi locali in pkexec di polkit CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2021-4034-POC

CVE-2021-4034-POC POC für die von Qualys entdeckte pwnkit-Schwachstelle. Kompilieren & ausführen: root@kitploit: gcc lpe.c -o lpe; ./lpe Erstellt die folgende Verzeichnis-/Dateistruktur: root@kitploit: /tmp ├── GCONVPATH=. │ └── test ├── payload.c ├── payload.so ├── test │ └── gconv-modules...

CVE-2026-21250

CVE-2026-21250: Windows HTTP.sys Elevação de Privilégio Local Windows 11 24H2 - Elevação de Privilégio Local 🚨 Análise técnica e recursos para a vulnerabilidade CVE-2026-21250 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 Este repositório contém documentação técnica e recursos para o estudo d...

cve-2026-31431-copy-fail

CVE-2026-31431 „Copy Fail“-Scanner & Patch-Helfer Copy Fail ist ein automatisierter Sicherheitsscanner und Patch-Helfer zur Erkennung und Behebung der Schwachstelle CVE-2026-31431 Linux-Kernel algifaead Local Privilege Escalation in Ihrer Linux-Infrastruktur. Inhaltsverzeichnis Beschreibung...

CVE-2026-31431-mitigacion

CVE-2026-31431 — Vollständige technische Analyse Klassifizierung: Lokale Privilegieneskalation LPE — Linux-Kernel CVSS: 7.8 Hoch Auswirkung: unprivilegierter Benutzer → root Betroffenes Modul: algifaead AFALG-Subsystem des Kernels Inhaltsverzeichnis 1. Warum ist es verwundbar? 2. Welche Versionen...