CVE-2024-6387

OpenSSH CVE-2024-6387 Mitigation Script This repository contains a Python script designed to help network administrators scan and secure SSH configurations against the CVE-2024-6387 vulnerability found in OpenSSH's signal handling mechanism. This vulnerability, if exploited, can allow unauthorize...

EUVD-2026-68988

A service running on the affected products contains a potential Time-of-Check Time-of-Use TOCTOU race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code...

CVE-2026-78319

CVE-2026-78319 affects a file exchange service on affected products (specific product names not stated in the provided documents). The root cause is a Time-of-Check Time-of-Use (TOCTOU) race condition , which allows an unauthenticated remote attacker to bypass intended security controls and poten...

CVE-2024-6387

转载原文 CVE-2024-6387 - PoC 📜 Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server A signal handler race condition was found in OpenSSH's...

CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CrushFTP_CVE-2025-54309

CVE-2025-54309 - CrushFTP Affected Versions 10.8.5 11.3.434 Race condition PoC by watchtower, adjusted to be more extensible. root@kitploit: python crushedftp.py usage: crushedftp.py -h -u USERNAME -p PASSWORD -r REQUESTS -P PAYLOAD target CrushFTP CVE-2025-54309 XML Race Condition Exploit...

ctl_ctloutput-leak

ctlctloutput-leak The ctlctloutput function in macOS High Sierra 10.13 ignores the return value of a call to sooptcopyin, which opens up a race window to leak uninitialized kernel heap data to user space. ctlctloutput-leak is a proof-of-concept exploit that attempts to trigger this information...

CVE-2023-37250-POC

CVE-2023-37250 PoC Artículo: https://hackingiscool.pl/roaming-and-racing-to-get-system-cve-2023-37250/...

CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion en OpenSSH Descripción CVE-2024-6387, apodado "regreSSHion", es una vulnerabilidad crítica en OpenSSH que permite a atacantes remotos no autenticados ejecutar código con privilegios de root en sistemas Linux vulnerables. Esta vulnerabilidad surge de una condición de...

CVE-2021-32708

CVE-2021-32708 Affected versions of this package are vulnerable to Race Condition. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. How the Exploit Works...

mach_race

Exploit de escalada de privilegios local de Mach Race para OS X c fG! 2015, 2016, [email protected] - https://reverse.put.as Un exploit universal de OS X para SUID, SIP y entitlements binarios CVE-2016-1757. Uso contra un binario SUID: root@kitploit: ./machraceserver /bin/ps compatmode for i...

RoguePlanet

RoguePlanet RoguePlanet Windows Defender Vulnerability Welcome back everyone !!! The exploit is a race condition, so it's a hit or miss. I have managed to get a 100% success rate on some machines while it struggled to work on others. The exploit has been tested in Windows 11 Official channel +...

CVE-2022-41218

Introduction This vulnerability is a race condition vulnerability that occurs in drivers/media/dvb-core/dmxdev.c. Therefore, a race condition may occur in the usb device driver using this dmxdev. This vulnerability could be used to trigger 3 UAFs. Vulnerability 1. vmalloc UAF write First, the...

CVE-2022-2602-Kernel-Exploit

CVE-2022-2602-Kernel-Exploit Details https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-iouring-uaf/ TL;DR The vulnerability is an Use-After-Free that impacts the registered file descriptor functionality in the iouring subsystem. It's...

CVE-2021-3560-Polkit-Privilege-Escalation

CVE-2021-3560-Polkit-Privilege-Escalation por Mark, Qingchen Yu Para construir el contenedor con root@kitploit: docker build -t . Para ejecutar el contenedor root@kitploit: docker run -it 1. comience con start.sh 2. Mida el tiempo de ejecución: Anote el tiempo 'real' y calcule su mitad...

CVE-2024-30088-Windows-poc

CVE-2024-30088-Windows-poc La vulnerabilidad reside en la función NtQueryInformationToken, particularmente al procesar la función AuthzBasepCopyoutInternalSecurityAttributes. Este fallo se origina en una gestión inadecuada de los mecanismos de bloqueo por parte del kernel al operar sobre objetos,...

WannaRace

🚀 WannaRace WebApp intentionally made vulnerable to Race Condition 🤖 Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to b...

CVE-2024-6387

0.Summary This is essentially a statistical vulnerability: it requires a large number of attempts to win the race condition and successfully execute arbitrary code, and the attacker needs to overcome many obstacles," Schwartz told SecurityWeek. "Even in the best case, the most famous vulnerabilit...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Privilege Escalation with Dirty COW CVE-2016-5195 Author: Samuel García Academy: 4Geeks Academy Date: 25/06/2025 Description Dirty COW is a critical Linux kernel vulnerability ≤ 4.8.3 that allows a local attacker to modify read-only files through a race condition, escalating privileges to root...

honda

RoguePlanet by Nightmare-Eclipse HONDA by nu11secur1ty RoguePlanet Windows Defender Vulnerability Authors: Original Exploit Developer Nightmare-Eclipse Developing, testing, and weaponization nu11secur1ty Penetration Testing Engineer 🧠 Technical Analysis by nu11secur1ty The exploit leverages a rac...