CVE-2026-9854

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine...

dirtycow

✅ Requirements / Affected Kernel Version Dirty COW adalah Local Privilege Escalation LPE di Linux kernel yang dikenal sebagai CVE-2016-5195. :contentReferenceoaicite:0index=0 🎯 Vulnerable Kernel Secara umum, Dirty COW berdampak pada Linux kernel 2.x sampai 4.x sebelum 4.8.3...

CVE-2022-0847

CVE-2022-0847 استغلال ثغرة CVE-2022-0847 والتي تزيل كلمة مرور حساب الجذر مباشرة الاستخدام: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit المتطلبات: gcc ملخص العمل: إن POC الاستغلال الكلاسيكي التقليدي لماكس كيلرمان كان يستخدم لإضافة مستخدم بصلاحيات الجذر، ولكن في هذا POC الاستغلال، يقوم بإزالة كل...

rootkit

روتكيت لينكس روتكيت بسيط لنواة لينكس كُتب للمتعة، وليس للشر. الوظائف يمكن للروتكيت القيام بما يلي: منح صلاحيات الجذر root لعملية في مساحة المستخدم إخفاء عملية حسب رقمها PID إظهار عملية كانت مخفية سابقًا حسب رقمها PID إخفاء ملفات أو مجلدات حسب أسمائها إظهار ملفات أو مجلدات كانت مخفية سابقًا إخفاء...

LinusWare-Source-Code-Internal

Linusware 1.2 — بنية الكود المصدري والمحرك أُعيد بناؤه وهندسته عكسيًا وتوثيقه بواسطة tekkenbugatti المنصة المستهدفة: Linux x8664 / Luau / محرك Roblox Runtime نظرة عامة Linusware 1.2 هو امتداد ومحرك تنفيذ أصلي لنظام Linux x8664 لـ Roblox / Luau. يحتوي هذا المستودع على الكود المصدري الكامل المعاد...

CVE-2026-53613-poc

CVE-2026-53613 PoC TOCTOU vulnerability in mount8 allowing local privilege escalation to root. Vulnerable Versions util-linux 2.41.0 through 2.41.4 util-linux 2.42.0 through 2.42.1 Exploits File| Method| Target ---|---|--- exploitshell.sh| SSH key extraction| /root exploitdirectshell.sh| Direct...

CVE-2026-3888

CVE-2026-3888 - snap-confine + systemd-tmpfiles Local Privilege Escalation Disclaimer: This repository is for educational purposes only. All content is based on the original security advisory published by Qualys on March 17, 2026. The vulnerability has been patched-always ensure your systems are ...

OSDS_Paper_CVE-2016-5195

CVE-2016-5195 "Dirty COW" This repository contains my paper and presentation slides on CVE-2016-5195, a Linux privilege escalation vulnerability, written for the Operating Systems: Design And Security course at FMI, University of Bucharest. Correction In my paper I claimed that you can use Dirty...

Windows-Local-Privilege-Escalation-Cookbook

Windows Local Privilege Escalation Cookbook Table of Contents Windows Local Privilege Escalation Cookbook Table of Contents Disclaimer Description Keynote Definition Useful Tools Vulnerabilities References Disclaimer This repository, "Windows Local Privilege Escalation Cookbook" is intended for...

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

The security researcher known as Chaotic Eclipse aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse has dropped a new zero-day dubbed FalconFlank , a proof-of-concept PoC for a privilege escalation flaw impacting Crowdstrike Falcon. "FalconFlank is a 0-day privilege escalation that abuses...

CVE-2026-46300

إخلاء مسؤولية الأبحاث الأمنية والمسائل القانونية هذا المستودع مخصص لأغراض التعليم والأبحاث الأمنية المصرح بها فقط. الاستخدام المسموح به فهم ثغرات الأمان ومفاهيم الاستغلال في بيئات خاضعة للتحكم أجهزة افتراضية محلية، مختبرات معزولة دراسة آليات عزل الحماية sandbox وقيودها تعلم تصميم البرمجيات الآمنة...

Certi-Bhai

Certi-Bhai: AD CS Exploitation Toolkit Certi-Bhai is a comprehensive collection of PowerShell exploitation tools for attacking Active Directory Certificate Services AD CS vulnerabilities. This toolkit implements various Escalation Scenarios ESCs that demonstrate critical security misconfiguration...

GhostLock-H80GT

English | 中文 Honor 80 GT Privilege Escalation PoC: GhostLock CVE-2026-43499 A local privilege escalation exploit for the Honor 80 GT AGT-AN00 , CVE-2026-43499 — a use-after-free in the kernel rtmutex removewaiter path — plus a companion KernelSU kernel-module loading solution. In principle the bu...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

CVE-2026-66804-CrossDevice-Service-EoP

CVE-2026-66804: Cross Device Virtual Camera EoP I independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed my submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...

kernel: Kernel: Remote out-of-bounds write in RDMA/siw

A flaw was found in the Linux kernel's Soft iWARP siw driver. A remote attacker, by sending specially crafted Read Response segments that exceed the requested length, can trigger an out-of-bounds write. This vulnerability can lead to memory corruption, potentially causing a kernel crash or...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

kernel: zram: fix use-after-free in zram_bvec_write_partial()

A flaw was found in the Linux kernel, specifically within the zram module. This vulnerability is a use-after-free error, where the system attempts to use a piece of memory after it has been freed. This occurs when the zrambvecwritepartial function allows an asynchronous read to write into a page...

kernel: zram: fix use-after-free in zram_bvec_write_partial()

A flaw was found in the Linux kernel, specifically within the zram module. This vulnerability is a use-after-free error, where the system attempts to use a piece of memory after it has been freed. This occurs when the zrambvecwritepartial function allows an asynchronous read to write into a page...

kernel: Kernel: Remote out-of-bounds write in RDMA/siw

A flaw was found in the Linux kernel's Soft iWARP siw driver. A remote attacker, by sending specially crafted Read Response segments that exceed the requested length, can trigger an out-of-bounds write. This vulnerability can lead to memory corruption, potentially causing a kernel crash or...