1467 matches found
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: net: skbuff: Fixed an issue where a missing zerocopy reference was present in the pskbcarve helpers. Both pskbcarveinsideheader and pskbcarveinsidenonlinear copy the old skbsharedinfo header into a new buffer using memcpy. Thi...
CVE-2018-18955
CVE-2018-18955 Linux local root exploit. Wrapper for Jann Horn's exploit for CVE-2018-18955, forked from kernel-exploits. In the Linux kernel 4.15.x through 4.19.x before 4.19.2, mapwrite in kernel/usernamespace.c allows privilege escalation because it mishandles nested user namespaces with more...
CVE-2026-31431-Copy-Fail
CVE-2026-31431 — Copy Fail Severidad: Crítica CVSS v3.1: 9.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Estado: Exploit público disponible Resumen CVE-2026-31431 "Copy Fail" es una vulnerabilidad de escalada de privilegios local en el subsistema criptográfico del kernel de Linux. Cualquier usuario sin...
CVE-2021-4034
CVE-2021-4034 https://raw.githubusercontent.com/hackingyseguridad/CVE-2021-4034/main/binario Copiar contenido RAW y pegar en la consola Bash shell: Vulnerabilidad CVE-2021-4034 Gravedad 7.8 de fecha 18/11/2021, en el componente pkexec de Polkit https://gitlab.freedesktop.org/polkit/polkit/...
dissecting-pkexec-cve-2021-4034
Dissecting pkexec CVE-2021-4034 Introduction and Usage Introduction This is a part of the blog post that explains how CVE-2021-4034 actually works. Usage This repository contains a single C file that contains code and comments, the compilation and running the file is fairly straight forward:...
CVE-2021-4034
CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Compilación Para compilar, solo usa make Nota : CentOS 8 Stream no tiene herramientas de desarrollo. Instálalas con: dnf groupinstall 'Development Tools' Uso Ejecuta ./cve-2021-4034 Si tu distribución es vulnerable, ¡obtendr...
dirty-frag-check
Dirty Frag 检查（CVE-2026-43284 / CVE-2026-43500） 针对“Dirty Frag”Linux 内核本地提权漏洞的只读检查器 （CVE-2026-43284、 CVE-2026-43500）。 检查内核版本、模块状态、KernelCare livepatch 以及您添加的任何 modprobe 黑名单。不运行漏洞利用代码。 配套工具：CVE-2026-31431-check。 注意：这是启发式检查。绿色结论并不代表绝对安全。在判定主机安全之前， 请与您所用发行版的安全公告交叉核对。MIT 许可，不提供任何担保。 快速运行 root@kitploit:...
CVE-2025-32463
CVE-2025-32463 エクスプロイト これは CVE-2025-32463 のエクスプロイトです。 この素晴らしい脆弱性を報告してくれた Stratascale の Rich Mirch 氏 @0xm1rch on X に感謝します。 元の記事: Vulnerability Advisory: Sudo chroot Elevation of Privilege NVD: CVE-2025-32463 CVSS 9.3 影響を受けるバージョン sudo 1.9.14 から 1.9.17 すべての p リビジョン の脆弱なビルドが、ほとんどの Linux...
CVE-2021-3560
Polkit Vulnerability - CVE-2021-3560 📕 Introduction In 2021, a researcher named Kevin BackHouse discovered a privilege escalation vulnerability in the polkit utility. however, not all linux versions are vulnerable to polkit. Below is an example of a vulnerable version; Red Hat Enterprise Linux 8...
CVE-2016-8655
ocoboroot.c linux AFPACKET 竞态条件漏洞利用 针对 Ubuntu 16.04 x8664 的漏洞利用 user@ubuntu:$ gcc chocoboroot.c -o chocoboroot -lpthread user@ubuntu: $ ./chocoboroot 使 vsyscall 页面可写.. 新的漏洞利用尝试开始，跳转到 0xffffffff8106f320，参数=0xffffffffff600000 套接字已分配 移除屏障并进行喷射.. 版本切换器停止，x = -1 y = 174222, 最后一个值 = 2 当前数据包版本 = 0...
CVE-2023-52654
Run file python3 CVE-2023-52654.py or sudo CVE-2023-52654.py latest kernel bypass root updated POC just run python file with root or without root ✅ Features Automatically escalate privileges on Unix systems by exploiting misconfigured setuid/setgid binaries, capabilities, and sudo permissions...
Exploit for Use After Free in Linux Linux_Kernel
root-s24-e1s Per-boot local root on Samsung Galaxy S24 SM-S...
CVE-2021-3156
CVE-2021-3156 xchg@ubuntu:/Desktop/CVE-2021-3156$ ./sudo-hax-me-a-sandwich CVE-2021-3156 PoC by blasty [email protected] usage: ./sudo-hax-me-a-sandwich available targets: root@kitploit: 0 Ubuntu 20.04.1 Focal Fossa - sudo 1.8.31, libc-2.31 1 Debian 10.0 Buster - sudo 1.8.27, libc-2.28...
CVE-2014-7911_poc
CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net how to build Import the project into eclipse,and build. ./cve20147911/assets/msmattack is the binary file of CVE-2014-4322 exploit.You...
CVE-2019-2215
CVE-2019-2215 CVE-2019-2215 POC for kernel 3.18 Based on Maddie Stone's POC from https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 How to use: adb push su98 /data/local/tmp adb push su98-memory-kallsyms /data/local/tmp adb shell G8231:/ $ cd /data/local/tmp G8231:/ $ chmod 755...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pcp (UTSA-2026-093145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093145 advisory. A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise Hi...
Astra Linux – Vulnerability in Linux 5.10
There is a vulnerability related to time-of-check to time-of-use issues in the iouringsubsystem’s IORINGOPCLOSE operation in the Linux kernel versions 5.6 to 5.11 inclusive. This vulnerability allows a local user to elevate their privileges to root. Introduced in the version...
Astra Linux – Vulnerability in multipath-tools
In versions of multipath-tools from 0.7.0 to 0.9.x, up to 0.9.2, local users could obtain root access, either alone or in conjunction with CVE-2022-41973. Local users who had access to write to UNIX domain sockets could bypass access controls and manipulate the multipath setup. This could result ...
EUVD-2026-54262
A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6...