1952 matches found
CVE-2026-64560-Analysis
CVE-2026-64560 β Linux Kernel posix-cpu-timers non-leader exec race UAF Reproducer / PoC trigger verification : Linux & Android NDK This repository is intended solely for verifying patch status and for research/learning on your own test devices. It does not contain any privilege...
bash-3.2-fixed-CVE-2014-6271
Introduction This is GNU Bash, version 3.2. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX.2 shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...
onionjuggler
OnionJuggler Feature-rich onion service manager for UNIX-like operating systems written in POSIX compliant shellscript OnionJuggler is a minimal requirement, portable collection of scripts and documentation to help the service operator juggle manage his onions. WARNING:do not trust this repo yet,...
opace6-cve-2026-64560
OnePlus Ace 6 Temporary Root Tool Obtain temporary root privileges for the current boot session on OnePlus Ace 6 via CVE-2026-64560 Linux kernel POSIX CPU timer UAF. Invalidated after reboot, does not modify system partitions. !WARNING May cause device reboot or data loss. Use only on your own...
flawfinder
About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...
2022-LPE-UAF
2022-LPE-UAF Untested POC code Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wil...
psc
PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...
tetsuo-pulse
Socket Library Maturity Notice : This library is functional and well-tested but newly released. It is appropriate for development, internal tooling, and controlled environments. Production deployment with untrusted network input should wait until the codebase has accumulated several months of...
EUVD-2026-105031
filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files...
2022-LPE-UAF
2022-LPE-UAF Untested POC code Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wil...
opace6-cve-2026-64560
OnePlus Ace 6 Temporary Root Tool Obtain temporary root privileges for the current boot session on OnePlus Ace 6 via CVE-2026-64560 Linux kernel POSIX CPU timer UAF vulnerability. Invalidated after reboot, does not modify system partitions. !WARNING May cause device reboot or data loss. Use only ...
cve-2026-64560-a16
CVE-2026-64560 β Toolchain + Multi-Target Port CVE-2026-64560 is a use-after-free in the Linux kernel posix-cpu-timers local unprivileged race, CVSS 3.1 = 7.8; unfixed in 6.6.118, fixed only in 6.6.147. This repository does two things: it turns the upstream toolchain, which can only be driven by ...
chronomaly-webos
Chronomaly β CVE-2025-38352 on LG webOS Kernel exploit for CVE-2025-38352 POSIX CPU timer race condition / use-after-free achieving persistent root on LG webOS Smart TVs running kernel 5.4.268 on ARM64. Verified on 4 TV models across multiple firmware versions. Responsibly disclosed to LG's...
EUVD-2026-109131
virtualenv is a tool for creating isolated virtual python environments. From 21.14.9 until 21.14.13, the bash bin/activate script can copy an attacker-controlled --prompt value into PS1 without escaping dollar signs or backticks when both promptvars and POSIX mode are disabled during activation...
nmapAutomator
nmapAutomator A script you can run in the background! Summary The main goal for this script is to automate the process of enumeration & recon that is run every time, and instead focus our attention on real pentesting. This will ensure two things: 1. Automate nmap scans. 2. Always have some recon...
CVE-2025-38352-PoC
CVE-2025-38352: Linux Kernel POSIX CPU Timer TOCTOU Race Condition & UAF A reproducible Proof-of-Concept PoC and automated GDB orchestration script for CVE-2025-38352 , a Time-of-Check to Time-of-Use TOCTOU race condition in the Linux kernel's POSIX CPU timer subsystem...
linux-4.1.15_CVE-2017-1000371
Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...
bst
Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...
Linux Distros Unpatched Vulnerability : CVE-2026-113722
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted...
poc-CVE-2025-38352
π poc-CVE-2025-38352 - Easy Download for a Security Tool π₯ Download Now π Overview This application is a proof of concept for CVE-2025-38352. It demonstrates a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin notes that this vulnerability ha...