CVE-2026-31431-rs

CVE-2026-31431 PoC copyfail Structure src/ ├── main.rs Exploit: AFALG + splice to overwrite /bin/su └── bin/ └── payload.rs Payload Self-contained nostd binaries with zero runtime dependencies: poc-rs: 4.1 KB payload embedded via includebytes! payload: 1.7 KB Build Requires Rust 1.85+: cargo buil...

poc-sky

CVE-2019-2215 on Skyworth / Coocaa TVs 9S60, Android 8.0 Te...

CVE-2025-6019_Exploit

CVE-2025-6019Exploit Step 1: Run 1.sh on a Linux device to build xfs.image Step 2: Transfer xfs.image to the target device and execute 2.sh. Success is indicated as shown below: neko@aosc-neko205 tmp $ bash 2.sh 当前用户: neko uid=1000neko gid=1001neko...

root-exploit-pixel3

Root Exploit for Pixel 3 Family This folder contains a local privilege escalation exploit, a modification of the bluefrostsecurity PoC for CVE-2020-0041. The exploit disables SELinux and then launches a root shell. The exploit was provided with hardcoded offsets for a Pixel 3 device running the...

CVE-2022-0847-DirtyPipe-Exploit

What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of concept. This exploit is merely...

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

🧨 Overview This repository contains a Proof‑of‑Concept exploit for GNU Inetutils telnetd remote authentication bypass vulnerability. The issue arises because telnetd improperly sanitizes the USER environment variable received via Telnet NEW‑ENVIRON negotiation before invoking /bin/login. By...

same_type_object_reuse_exploits

PoC Same-Type/Same-Address Object Reuse Exploits PoC exploits developed by Mathias Krause associated with the blog at https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse...

CVE-2026-24061

CVE-2026-24061: telnetd Authentication Bypass Vulnerability CVE-2026-24061 is an authentication bypass vulnerability in telnetd that allows attackers to bypass identity verification through specific combinations of environment variables and directly obtain a root-privileged shell. There is a flaw...

CVE-2011-2523

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd si...

CVE-2026-24061

CVE-2026-24061 Reproduction Steps Build the image docker build -t telnetd-bypass . Start the container docker run -it --rm \ --name telnetd-vuln \ --privileged \ -p 23:23 \ telnetd-bypass Send the payload USER='-f root' telnet -a 127.0.0.1 23 Output Trying 127.0.0.1... Connected to localhost...

CVE-2021-36260

Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description Attackers can exploit this vulnerability to gain complete control over the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras,...

CVE-2026-24061

CVE-2026-24061 — inetutils-telnetd Authentication Bypass A proof-of-concept exploit for the authentication bypass vulnerability in GNU inetutils-telnetd. Overview CVE-2026-24061 is a critical authentication bypass vulnerability affecting inetutils-telnetd versions 1.9.3 through 2.7. It allows a...

CVE-2026-24061

CVE-2026-24061 - Telnet Argument Injection Nuclei template for detecting the CVE-2026-24061 vulnerability in GNU inetutils telnetd, allowing root access without authentication. 📋 Vulnerability Description CVE-2026-24061 is a critical argument injection vulnerability in GNU inetutils telnetd that...

CVE-2026-24061

CVE-2026-24061 - telnetd auth bypass What it's about Argument injection in telnetd from GNU InetUtils. Versions 1.9.3 to 2.7. CVSS 9.8. On the CISA KEV list since 26.01.2026, meaning it's actively exploited in the wild. The whole trick is that telnetd takes the value of the USER environment...

DIRTYFAIL

DIRTYFAIL A unified detector and PoC harness for the Copy Fail and Dirty Frag Linux page-cache write vulnerability families. ██████╗ ██╗██████╗ ████████╗██╗ ██╗███████╗ █████╗ ██╗██╗ ██╔══██╗██║██╔══██╗╚══██╔══╝╚██╗ ██╔╝██╔════╝██╔══██╗██║██║ ██║ ██║██║██████╔╝ ██║ ╚████╔╝ █████╗ ███████║██║██║ █...

CVE-2026-4747

/ /\ \ / / | | \ / \ \ \ \ | || | || || \ | | \ \ / /| | | | | | | \ \ | | / /| || | | | | \ V / | ||| / /| || / / \ \ | || | / / | |/ / | / | ||/| \ / // |||| CVE-2026-4747 — FreeBSD Remote Kernel RCE Stack Buffer Overflow inkgssapi.ko → Root Shell in 4 hours "The first remote kernel RCE...

copy-fail-CVE-2026-31431

CVE-2026-31431 Copy Fail exploit Author: pyroceper Tested on: Ubuntu 25.10 x8664 $ make $ ./exploit Detected kernel: 6.17.0 Making backup of /etc/passwd to /tmp Backup saved as /tmp/passwd.bak Obtaining root shell... id uid=0pwn gid=0root groups=0root whoami pwn CREDITS & REFERENCES: Original...

tscan

Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based scanner for detecting and exploiting the CVE-2026-24061 vulnerability in GNU Inetutils telnetd services. This tool scans IP addresses or networks for vulnerable telnetd services that allow authentication bypass leading to root shell access...

CVE-2017-16995

CVE-2017-16995 tested for Ubuntu 16.04.01 - Linux 4.4.0-31-generic 50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016 x8664 This vulnerability allow a simple user to do a privilege escalation and get a root shell if different kernel adjust CRED offset + check kernel stack size...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...