CTF-CVE-2022-0847

Dirty Pipe Deployment For this challenge, you want to overwrtie the "cat.txt" read-only file using CVE-2022-0847 exploit There are many way to do it using the exploit Dependencies Linux Kernel Version 5.8 or later vulnerable gcc GNU Compiler Collection for compiling the exploit code First-Time...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...

CVE-2026-96581

A flaw was found in ash. In multitenant configurations, record creation actions configured to update existing entries upsert do not properly verify that conflicting records belong to the requesting tenant. An authenticated user can exploit this vulnerability by submitting a record identifier from...

CVE-2024-42471-PoC

CVE-2024-42471-PoC tar-fs file write/overwrite vulnerability...

Injection-vulnerability-in-Paradox-Security-Systems-IPR512-CVE-2023-24709-PoC

Injection vulnerability in Paradox Security Systems IPR512 - CVE-2023-24709 PoC In Paradox Security System IPR512 Web console login form page, attacker can input JavaScript string, such as that will overwrite configurations in the file "login.xml" and cause the login form to crash and make it...

POC-CVE-2019-5736

RunC-CVE-2019-5736 Video : https://bit.ly/2WqvILb Blog Post : www.idealhax.blogspot.com/2020/05/breaking-out-of-docker-via-runc.html Here, I like to mention that the original developer of this exploit is Yuval Avrahami at Twistlock Labs. Running the POCs Note that running the POCs will overwrite...

CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE Buffer Overflow Discoverer : Golden Ticket Labs Vendor : Particle Date Assigned : August 12th 2025 MITRE Description A buffer overflow in the blecontrolrequestchannel.cpp component of Particle Device OS v5.6.0 enables arbitrary function pointer overwrite du...

CVE-2026-109411

An access control bypass flaw was found in Samba's vfscephrgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfscephrgw module. When a client requests an existing file using mismatch...

Dirty-Pipe-CVE-2022-0847-POCs

Dirty-Pipe-CVE-2022-0847-POCs Author: Max Kellermann [email protected] Contributor: Bl4sty https://twitter.com/bl4sty A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann...

AMSI-Bypass

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ AMSI Write Raid...

cve_2019-5736-PoC

CVE-2019-5736 PoC This repository contains a C-based proof-of-concept exploit for CVE-2019-5736. This vulnerability allows a malicious Docker container to overwrite the host's runc binary and execute arbitrary commands on the host with root privileges – fully compromising the host system. Inspire...

CVE-2021-27965

CVE-2021-27965 Proof of concept for CVE-2021-27965 Stack-based Buffer Overflow NOTE: I probably will not update this any further there is still a chance I will finish it. I currently have the ability to cleanly overwrite the instruction pointer, but I believe that this is enough to prove I have t...

CLSA-2026-1792990909 libexif: Fix of 3 CVEs

CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks...

Important: Red Hat Security Advisory: lrzsz security, bug fix, and enhancement update

An update for lrzsz is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode

A flaw was found in lrzsz. The lrz receive utility fails to properly sanitize absolute file paths in restricted mode, only checking for relative path traversal sequences. A remote attacker transmitting files can exploit this vulnerability to write or overwrite arbitrary files outside the intended...

GL.iNet <= 4.3.7 - Arbitrary File Write

GL.iNet = 4.3.7 is vulnerable to an arbitrary file write exploit, allowing an attacker to overwrite arbitrary system files. id: CVE-2023-46455 info: name: GL.iNet = 4.3.7 - Arbitrary File Write author: Zierax severity: high description: | GL.iNet = 4.3.7 is vulnerable to an arbitrary file write...

Dgraph <=v25.3.0 - Admin Mutation Missing Authorization

Dgraph =v25.3.0 contains an authentication bypass caused by missing authorization middleware for the restoreTenant admin mutation, letting unauthenticated attackers overwrite the database, read files, and perform SSRF, exploit requires no authentication. id: CVE-2026-34976 info: name: Dgraph...

ALSA-2026:89755 Important: lrzsz security, bug fix, and enhancement update

Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz package. Lrzsz was created to provide a working GNU copylefted Zmodem solution for Linux systems. Security Fixes: lrzsz: lrzsz: Arbitrary file overwrite via...

RHEL 9 : lrzsz (RHSA-2026:89755)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89755 advisory. Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz...

Important: lrzsz security, bug fix, and enhancement update

Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz package. Lrzsz was created to provide a working GNU copylefted Zmodem solution for Linux systems. Security Fixes: lrzsz: lrzsz: Arbitrary file overwrite via...