CVE-2022-0847-POC

CVE-2022-0847 CREDITS: root@kitploit: vulnerability author: Max Kellermann max kellermann explanation: https://dirtypipe.cm4all.com/ RESOURCES: root@kitploit: PAGE CACHE: https://manybutfinite.com/post/page-cache-the-affair-between-memory-and-files/ PIPE:...

Dirty-Pipe-CVE-2022-0847

Dirty-Pipe-CVE-2022-0847 CVE-2022-0847 Dirty Pipe is an arbitrary file overwrite vulnerability that allows escalation of privileges by modifying or overwriting arbitrary read-only files e.g. /etc/passwd, /etc/shadow. Steps 1. Compile using gcc cve-2022-0847-exploit.c -o cve-2022-0847-exploit 2. R...

CVE-2022-0847-Container-Escape

CVE-2022-0847-Container-Escape CVE-2022-0847 used to achieve container escape 利用CVE-2022-0847 Dirty Pipe 实现容器逃逸 使用go语言实现...

CVE-2022-0847

CVE-2022-0847 CVE-2022-0847 POC Link：https://dirtypipe.cm4all.com/ Reproduce the environment root@kitploit: The vulnerability exists in Ubuntu kernel versions starting from v5.8 all the way up to 5.15 like Linux 5.14.0-9parrot1-amd64 Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1...

CVE-2022-0847

Information root@kitploit: Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Date: 03/07/2022 Exploit Author: Max Kellermann Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 How...

dirty-pipe

Dirty Pipe - CVE-2022-0847 This is simply the code and instructions for how to use Max Kellermann's exploit for CVE-2022-0847 known as Dirty Pipe. Please go to https://dirtypipe.cm4all.com/ to read more about how to exploit works! How to use 1. Download and compile the exploit binary root@kitploi...

CVE-2022-0847

CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later versions, even on Android devices. - A...

CTF-CVE-2022-0847

Dirty Pipe Deployment For this challenge, you want to overwrtie the "cat.txt" read-only file using CVE-2022-0847 exploit There are many way to do it using the exploit Dependencies Linux Kernel Version 5.8 or later vulnerable gcc GNU Compiler Collection for compiling the exploit code First-Time...

CVE-2022-0847-DirtyPipe-Exploit

What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of concept. This exploit is merely...

CVE-2023-36664-Ghostscript-command-injection

Ghostscript command injection vulnerability PoC CVE-2023-36664 Vulnerability disclosed in Ghostscript prior to version 10.01.2 leads to code execution CVSS score 9.8. Official vulnerability description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the...

CrystalPotato

CrystalPotato Crystal port of GodPotato, a local privilege escalation from accounts with SeImpersonatePrivilege to SYSTEM. It works by abusing the DCOM OXID Resolver and named pipe impersonation. Windows APIs are resolved dynamically and invoked through indirect syscall stubs, all strings are...

CVE-2022-23935

CVE-2022-23935 The Exiftool software program, in versions prior to 12.38, has a security vulnerability that can be exploited through a specially crafted filename. This vulnerability allows for command injection, where an attacker can execute arbitrary commands on the system by appending a pipe...

CVE-2022-0847-Dirty-Pipe

CVE-2022-0847 Dirty Pipe Pre-compiled exploit for CVE-2022-0847 Dirty Pipe. Original source code from haxx.in/dirtypipe. Build root@kitploit: make glibc static build make zig-musl-static ZIGTARGET=x8664-linux-musl musl static build Download Download pre-built binaries from Releases. Supported...

Snyk Scan

Bitbucket Pipelines Pipe: Snyk This pipe uses Snyk to find, fix and monitor known vulnerabilities in your app dependencies and docker image. YAML Definition Add the following snippet to the script section of your bitbucket-pipelines.yml file: root@kitploit: - pipe: snyk/snyk-scan:1.0.2 variables:...

CVE-2025-62215

CVE-2025-62215 INTEGRATED EXPLOIT SUITE v4.5 1. Project Overview This project is an automated exploit tool suite targeting Windows Kernel Race Condition and Double-Free vulnerabilities. It combines dynamic offset extraction using the WinDbg JS engine with real-time binary loading technology of th...

CVE-2022-0847

CVE-2022-0847 PoC Usage root@kitploit: dirty-pipe CVE-2022-0847 USAGE: dirty-pipe --target --offset --data OPTIONS: -t, --target TargetFile -o, --offset Offset -d, --data Data -h, --help Print help information...

CVE-2022-0847-Docker

Dirty Pipe CVE-2022-0847: A Hands-On Exploit Demonstration in Docker This repository provides a self-contained, interactive Docker environment to safely demonstrate and analyze the "Dirty Pipe" privilege escalation vulnerability. It is designed as an educational tool for security professionals to...

Linux Distros Unpatched Vulnerability : CVE-2026-64847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...

CVE-2025-70342

CVE-2025-70342: Credential Interception via Named Pipe in erase-install Summary erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. On Apple Silicon Macs, admin credentials entered during reinstall/erase operations are written...