Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

overlayFS-CVE-2021-3493

overlayFS CVE-2021-3493 OverlayFs OverlayFS is a Linux kernel module that allows the system to combine multiple mount points into one, so that it can access all files from each within a single directory structure. About the vulnerability Recently SSD-Discloure released a PoC for an exploit of the...

CVE-2021-22555

CVE-2021-22555 This repo hosts TUKRU's Linux Privilege Escalation exploit CVE-2021-22555. It demonstrates gaining root privileges via a vulnerability. Tested on Ubuntu 5.8.0-48-generic and COS 5.4.89+. Use responsibly and ethically. CVE-2021-22555: Linux Privilege Escalation Exploit This reposito...

GhostLock-for-OnePlus15T

GhostLock — OnePlus 15T Kernel exploit targeting locked-bootloader OnePlus 15T devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Modified from the originalGhostLock-for-OnePlus...

CVE-2024-6387

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ OpenSSH...

CVE-2025-32463

CVE-2025-32463 Exploit Overview This repository provides a Go-based exploit tool for CVE-2025-32463 , a critical local privilege escalation vulnerability CVSS 9.3 in sudo versions 1.9.14 to 1.9.17. It allows unauthorized local users to gain root access by exploiting a flaw in the --chroot -R...

CVE-2025-32463

CVE-2025-32463 🚨 Privilege escalation to root usingsudo chroot. No need for gcc installed. 🚀 What is CVE-2025-32463? CVE-2025-32463 is a Linux vulnerability that allows a local attacker to escalate privileges to root by abusing the sudo chroot command. Unlike similar exploits, this technique does...

CVE-2026-31431-Copy-Fail

CVE-2026-31431-Copy-Fail xpl0ited by infrar3d This repository contains a proof‑of‑concept exploit for CVE-2026-31431 Copy Fail. CVE-2026-31431, known as "Copy Fail", is a high-severity Local Privilege Escalation LPE flaw in the Linux kernel that has been present for nearly a decade. It allows an...

POCO-M7-Plus-Jailbreak

POCO M7 Plus SM6375 - Jailbreak Root Research Disclaimer: This document is written purely for educational and security research purposes. All testing was performed on my own device. I am not responsible for bricked devices, data loss, or misuse of this information. The vulnerabilities discussed...

2026-41940-poc

CVE-2026-41940 - cPanel/WHM Authentication Bypass CVSS 9.8 | Unauthenticated root access via CRLF injection Usage python3 cp.py -t cpanel.target.com detect python3 cp.py -t cpanel.target.com --exploit exploit @nickpaulsec...

copy-fail-CVE-2026-31431-php

CVE-2026-31431 Copy Fail PHP PoC www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php CVE-2026-31431.php id...

GhostLock

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring-Oncord+ Android-Sterio We have conducted vulnerablity assessment on one of the most selling after marrket car infotainment unit. Creating Persistent Backdoor on Oncord+ android/ios car infotainment unit using malicious script! About Device: Android version : 12 Kernel...

CVE-2026-31431

CVE-2026-31431 Copy Fail - CVE-2026-31431 Detail https://nvd.nist.gov/vuln/detail/CVE-2026-31431 https://copy.fail/exploit https://xint.io/blog/copy-fail-linux-distributions Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

CVE-2026-31431-RCE-Exploit

🔴 CVE-2026-31431 — "Copy Fail" A 9-Year-Old Linux Kernel Logic Bug That Grants Root in Seconds Overview Copy Fail is a high-severity local privilege escalation LPE vulnerability in the Linux kernel's cryptographic subsystem algifaead. Discovered and disclosed by Theori via their Xint Code...

Exploit11.2

Exploit11.2 Exploit iOS 11.2.x by ZIMPERIUM and semi-completed by me. Sandbox escapes on CVE-2018-4087.This checks also of a root access incompleted. You can creat an app to running exploit on your device if you are a developer and turn the root access @. Thanks to: •RaniXCH, Adam Donenfeld,...

op13-cve-2026-64560

OnePlus 13 OP5D0DL1 CVE-2026-64560 Device-specific adaptation of the CVE-2026-64560 Android proof of concept for the exact OnePlus 13 PJZ110 builds listed below. It provides temporary root access for the current boot through an ADB-shell-only helper. !WARNING This is experimental kernel exploit...

CVE-2026-24061

GNU InetUtils telnetd Argument Injection Authentication Bypass CVE-2026-24061 In January 2026, the GNU telnetd service from GNU InetUtils was found to be vulnerable to authentication-bypass byKyu Neushwaistein aka Carlos Cortes Alvarez. Tracked as CVE-2026-24061, this flaw allows an attacker to...

CVE-2024-34313

CVE-2024-34313 Description VPL Jail System up to v4.0.2 was discovered to contain a Path Traversal vulnerability allowing arbitrary file overrides and thereby privilege escalation to root user. This vulnerability can be chained with CVE-2024-34312 to take over a Moodle instance remotely without a...