Driver-SoulExtraction

SoulExtraction SoulExtraction is a windows driver library for extracting cert information in windows drivers Compile Visual Studio 2022 & WDK10 llvm-msvc link Credit linux BackEngineerLab https://git.back.engineering/gmh5225/Driver-SoulExtraction Some discussions on UnknownCheats...

CVE-2021-25281

CVE-2021-25281 Chaining CVE-2021-25281 and CVE-2021-25282 to exploit a SaltStack...

terminalphone

TerminalPhone Encrypted push-to-talk voice communication over Tor hidden services. TerminalPhone is a single, self-contained Bash script that provides anonymous, end-to-end encrypted voice and text communication between two or more parties over the Tor network. It operates as a walkie-talkie: you...

penelope

Penelope is a modern shell handler for penetration testers and CTF players. It provides a more capable alternative to basic netcat listeners, adding automatic PTY upgrades, session management, logging, file transfers and helper modules. Table of Contents 📥 Installation ⚙️ Features 🖥️ Session...

Exploit for CVE-2026-98260

CVE-2026-98260 · Xiaomi 17 Ultra nezha Android port This...

frameworks_base_AOSP10_r33_CVE-2021-0337

This repository does not have a README...

CVE-2026-98942

The Linux kernel contains a vulnerability in the sched_ext component where cid tables were visible to cid kfuncs while being modified. Specifically, the first enable published global pointers before they were filled, and subsequent operations overrode them in place. This allowed a racing TRACING ...

CVE-2026-98942 sched_ext: Build the cid tables privately and publish them with RCU

In the Linux kernel, the following vulnerability has been resolved: schedext: Build the cid tables privately and publish them with RCU The cid tables are visible to the cid kfuncs while being modified: the first enable publishes the global pointers before filling them, ops.initcids overrides...

EUVD-2026-108914

In the Linux kernel, the following vulnerability has been resolved: schedext: Build the cid tables privately and publish them with RCU The cid tables are visible to the cid kfuncs while being modified: the first enable publishes the global pointers before filling them, ops.initcids overrides...

CVE-2026-98941

The Linux kernel contains a vulnerability in the ext4 filesystem where enabling the encrypt feature on a mounted filesystem circumvents existing checks. This leads to a kernel NULL pointer dereference and a resulting system crash when writing encrypted data. This issue affects all kernels between...

CVE-2026-98941 ext4: don't enable large folios on encrypted inodes

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

EUVD-2026-108913

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

CVE-2026-98940

The Linux kernel contains a vulnerability in the ASoC: qcom: lpass-cpu driver where the system incorrectly uses a DAI ID (a hardware port ID) as an index for the variant->dai_driver table. Because DAI IDs may be sparse, this mismatch can cause the code to write beyond the table boundaries when...

CVE-2026-98940 ASoC: qcom: lpass-cpu: use DAI table index for playback constraints

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-daidriver. When configuring a DAI with...

EUVD-2026-108912

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the index of the corresponding entry in variant-daidriver. When configuring a DAI with...

CVE-2026-mikrotik-poc

MikroTik RouterOS PoC Collection This repository contains proof-of-concept PoC scripts for several MikroTik RouterOS security issues researched and documented in 2026. The materials are intended for authorized security research, laboratory validation, and controlled testing only. This project is...

CVE-2026-98939

The Linux kernel contains a vulnerability where a possible deadlock occurs on systems with a discrete GPU . The root cause is an x86 commit that introduced an mmap_read_lock() in kernel page protection munging code. This creates a circular locking dependency because the huge vmap code holds the s...

CVE-2026-98939 x86/mm: Drop unnecessary PMD page copy when freeing

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as kswapd shrinks the TTM page pool. The immediate cause is an x86 commit that added an mmapreadlock to...

EUVD-2026-108911

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as kswapd shrinks the TTM page pool. The immediate cause is an x86 commit that added an mmapreadlock to...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...