CVE-2022-0847

CVE-2022-0847 Simple reproduction of CVE-2022-0847 Original article by the disclosing author: https://dirtypipe.cm4all.com/ Reproduction Environment root@kitploit: Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencies root@kitploit: gcc Usage Steps...

Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847

root@kitploit: Chrono-Drip: Temporal Viscosity Exploitation Framework CVE-2022-0847 Weaponization via Convergent Time Theory CTT ⚠️ DISCLAIMER FOR RESEARCH AND ACADEMIC PURPOSES ONLY This tool demonstrates the application of fundamental physics discoveries to cybersecurity. All work presented here...

PT-2026-90463

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace pipe read on sub-buffer order change Writing to buffer subbuf size kb calls ring buffer subbuf order set, which frees every sub-buffer of the ring buffer, including the reader page, and replac...

PT-2026-90112

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smc rx pipe buf release smc rx splice hands RMB pages to a pipe and takes a socket reference per entry so the smc sock stays alive until the reader finishes. The connection does not: a concurrent...

DirtyPipe-Exploit

CSE 5380: Information Security Paper CVE-2022-0847 Dirty Pipe By Karan Vasudevamurthy UTA ID: 1002164438 What is CVE? Common Vulnerabilities and Exposures CVE is a list of publicly disclosed information security vulnerabilities and exposures. The MITRE corporation introduced CVE in 1999 to identi...

dirtypipe-container-breakout-poc

Dirty Pipe Container Escape Moved to https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...

dirtypipe2

dirtypipe2 Linux Kernel 5.8 5.15.25 - Local Privilege Escalation DirtyPipe 2 Exploit Author: Antonius w1sdom github : https://github.com/bluedragonsecurity web : https://www.bluedragonsec.com tested on : linux kernel 5.13.0-21-generic compiled on lubuntu 20.04.5 linux lubuntu 20.04.2 - linux kern...

CVE-2022-0847

CVE-2022-0847 - Dirty Pipe Exploit A proof-of-concept exploit for CVE-2022-0847 Dirty Pipe, a Linux kernel vulnerability that allows unprivileged users to write to read-only files. Vulnerability Details CVE-2022-0847 affects Linux kernels 5.8 through 5.16. It exploits a race condition in the Linu...

CVE-2026-9490

CVE ID: CVE-2026-9490 研究者: Vo Duc Thang ugvxb 致谢: https://community.acer.com/en/kb/articles/19668 1. 执行摘要 在 Acer Care Center 服务（ACCSvc.exe）中发现了一个严重的安全漏洞。该漏洞允许任何经过身份验证的本地用户使系统服务崩溃（拒绝服务），并可能通过一个安全保护薄弱的命名管道接口提升权限。 该服务以 SYSTEM 权限（LocalSystem）运行，暴露出一个命名管道，其访问控制过于宽松，向所有经过身份验证的用户授予了读、写和执行权限。 2. 漏洞详情 2.1...

ysoserial-modified

ysoserial-modified Thats a fork of the original ysoserial application that can be found here: https://github.com/frohoff/ysoserial Description of the Modification Due how Runtime.getRuntime.execString.class works in java, nested and complex commands where you'll need control pipes or send the...

Linux Distros Unpatched Vulnerability : CVE-2026-80915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault...

CVE-2026-67401

cve-id Donate...

CVE-2026-80915

CVE-2026-80915 affects the Linux kernel drm/xe driver (Intel Xe GPU). The vulnerability is in DPT (Display Plane Table) allocation paths , where an incorrect fallback from VRAM to system memory produces a black screen with pipe fault errors , and use of stolen memory on media GT systems introduce...

CVE-2026-9789

CVE ID: CVE-2026-9789 Researcher: Vo Duc Thang ugvxb Acknowledgement: https://community.acer.com/en/kb/articles/19670 Video POC: https://drive.google.com/file/d/1B8b42bE68CWMnlqG6eJWi0txGFsHAJZc/view?usp=sharing 1. Executive Summary A critical local privilege escalation vulnerability has been...

CVE-2022-0847-Dirty-Pipe-

CVE-2022-0847-Dirty-Pipe- this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline" Max Kellermann, a developer at CM4all a German web hosting company, found it in early 2022 but not by checking for vulnerability. He was debugging when ...

CVE-2022-0847-DirtyPipe-Exploit

A vulnerability was found in Linux Kernel up to 5.10.101/5.15.24/5.16.10 Operating System and classified as critical. This issue affects some unknown processing of the component Pipe Handler. Impacted is confidentiality, integrity, and availability. The weakness was presented 03/08/2022. The...

CVE-2012-2982

CVE-2012-2982 Description file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character. Installation 1. git clone https://github.com/CpyRe/CVE-2012-2982.git 2. pip3 install -...

CVE-2020-11492

CVE-2020-11492 Proof-of-Concept PoC for Docker Desktop for Windows privilege escalation vulnerability. This vulnerability was patched in Docker version 2.3.0.2 on May 11th, 2020. This PoC performs the following: creates a named pipe mimicking docker named pipe \.\pipe\dockerLifecycleServer, call...

CVE-2024-42049-PoC

CVE-2024-42049-PoC CVE Details https://nvd.nist.gov/vuln/detail/CVE-2024-42049 TightVNC Server for Windows before 2.8.84 allows attackers to connect to the control pipe via a network connection. PoC Details article: https://izvd.eu/research/exploiting-cve-2024-42049 tested on: 2.7.10, 2.8.81; mos...

CVE-2022-0847

CVE-2022-0847 Vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes. To compile: gcc poc.c -o poc Usage: ./poc TARGETFILE OFFSET DATA Author and...