nmapAutomator

nmapAutomator A script you can run in the background! Summary The main goal for this script is to automate the process of enumeration & recon that is run every time, and instead focus our attention on real pentesting. This will ensure two things: 1. Automate nmap scans. 2. Always have some recon...

2022-LPE-UAF

2022-LPE-UAF Código PoC sin probar Investigadores de seguridad descubrieron 3 vulnerabilidades en el kernel de Linux que podrían permitir a un atacante local elevar privilegios y potencialmente ejecutar código malicioso. El código de prueba de concepto está disponible públicamente, lo que aumenta...

linux-4.1.15_CVE-2017-1000371

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

onionjuggler

OnionJuggler Gestor de servicios onion con muchas funciones para sistemas operativos tipo UNIX, escrito en shellscript compatible con POSIX OnionJuggler es una colección portátil de scripts y documentación de requisitos mínimos para ayudar al operador del servicio a hacer malabares gestionar sus...

chronomaly-webos

Chronomaly — CVE-2025-38352 on LG webOS Kernel exploit for CVE-2025-38352 POSIX CPU timer race condition / use-after-free achieving persistent root on LG webOS Smart TVs running kernel 5.4.268 on ARM64. Verified on 4 TV models across multiple firmware versions. Responsibly disclosed to LG's...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

tmpmail

Un correo electrónico temporal directamente desde tu terminal escrito en POSIX sh tmpmail es una utilidad de línea de comandos escrita en POSIX sh que te permite crear una dirección de correo electrónico temporal y recibir correos en esa dirección temporal. Utiliza la API de 1secmail para recibir...

CVE-2026-64560-Analysis

CVE-2026-64560 — UAF da race non-leader exec in posix-cpu-timers del kernel Linux Reproducer / PoC tipo trigger di verifica : Linux e Android NDK Questo repository serve esclusivamente per verificare lo stato delle patch su dispositivi di test di propria proprietà e per ricerca/studio; non contie...

external_libcap-Android10_r33_CVE-2023-2603

Esta é uma biblioteca para obter e definir capabilidades POSIX.1e anteriormente POSIX 6 do draft 15. Esta biblioteca não teria sido possível sem a ajuda de root@kitploit: Aleph1, Roland Buresund e Andrew Main, Alexander Kjeldaas. Mais informações sobre capabilidades no kernel Linux podem ser...

poc-CVE-2025-38352

🚀 poc-CVE-2025-38352 - Download Facile per uno Strumento di Sicurezza 📥 Scarica Ora 📖 Panoramica Questa applicazione è una proof of concept per CVE-2025-38352. Dimostra una vulnerabilità nell'implementazione dei timer CPU POSIX del kernel Linux. Il bollettino Android di settembre 2025 segnala che...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

bash-3.2-fixed-CVE-2014-6271

Introduzione Questa è GNU Bash, versione 3.2. Bash è la Bourne Again SHell del progetto GNU, un'implementazione completa della specifica di shell POSIX.2, ma anche con editing interattivo della riga di comando, controllo dei job sulle architetture che lo supportano, funzionalità simili a csh come...

2022-LPE-UAF

2022-LPE-UAF Nicht getesteter POC-Code Sicherheitsforscher haben 3 Schwachstellen im Linux-Kernel entdeckt, die es einem lokalen Angreifer ermöglichen könnten, Privilegien zu erweitern und potenziell schädlichen Code auszuführen. Der Proof-of-Concept-Code ist öffentlich verfügbar, was die...

tetsuo-pulse

सॉकेट लाइब्रेरी परिपक्वता सूचना : यह लाइब्रेरी कार्यात्मक और अच्छी तरह से परीक्षित है लेकिन हाल ही में जारी की गई है। यह विकास, आंतरिक उपकरणों और नियंत्रित वातावरण के लिए उपयुक्त है। अविश्वसनीय नेटवर्क इनपुट के साथ उत्पादन परिनियोजन तब तक प्रतीक्षा करनी चाहिए जब तक कि कोडबेस में वास्तविक दुनिया क...

CVE-2026-58094 TOCTOU race in POSIX shared memory large page configuration

The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098667)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098667 advisory. A flaw was found in the filelockinit in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number o...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098921 advisory. In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership chown and group chgrp...

BIT-PYTHON-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

BIT-PYTHON-MIN-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

BIT-LIBPYTHON-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...