USN-8680-1: FFmpeg vulnerabilities

Adrian Junge discovered that FFmpeg incorrectly handled certain subtitle data. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-70628 Adrian Junge discovered that FFmpeg incorrectly handled certain video files. An attacker could possibly u...

PwnTillDawn-Portal-Walkthrough

🔐 Valutazione della Vulnerabilità e Test di Penetrazione VAPT 📌 Progetto: Walkthrough di Sfruttamento del Target ⚠️ Questo progetto è solo per scopi educativi e di test autorizzati. L'accesso non autorizzato ai sistemi è severamente vietato. 👨‍💻 Autore SYAFIQ Ruolo: Penetration Tester Capo 🎯...

USN-8678-2: OpenSSL, OpenSSL 1.0 vulnerabilities

USN-8678-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding fix for OpenSSL and OpenSSL 1.0 on Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. In addition, this update also fixes the following issues that were not previously addressed in those releases: It was...

CVE-2016-8863

Ziele pupnp release-1.6.18 ... ... läuft auf i386 Ubuntu 16.04. Behebung commit 9c099c2923ab "Behebe Zugriff außerhalb der Grenzen in createurllist CVE-2016-8863"...

USN-8670-2 curl vulnerability

USN-8670-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. Original advisory details: Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. Thi...

CVE-2021-3899_PoC

CVE-2021-3899 PoC Riproduzione 0. Installa una versione precedente di apport: sudo apt-get install apport=2.20.11-0ubuntu27 qualsiasi versione apportstart: 597 errorlog'process was replaced after Apport started, ignoring' 598 sys.exit0...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Escalation locale dei privilegi Versioni interessate Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Utilizzo gcc exploit.c -o exploit ./exploit Descrizione "Problema specifico di Ubuntu nel filesystem overlayfs del kern...

netsec-project

Nome del Progetto Script di attacco CVE-2021-22555 Descrizione Questo progetto è uno strumento di attacco automatico implementato in Python. Esegue vari test di sicurezza e attacchi su un sistema target che esegue Ubuntu 20.04 con versione del kernel 5.8.0-48. Lo strumento include funzionalità co...

regreSSHion-Checker

OpenSSH-Sicherheitsauditor regreSSHion & 2026-Schwachstellen Ein leichtgewichtiges, nicht-invasives Python-Tool, das prüft, ob entfernte SSH-Server anfällig für kritische OpenSSH-Exploits sind. Es extrahiert und parst SSH-Banner, um verwundbare Versionen zu erkennen, und berücksichtigt...

exploit_linux_kernel4.13

Questo repository contiene un vecchio poc che combina tre CVE CVE-2017-14954, CVE-2017-18344, CVE-2017-5123. Il poc è un'Elevazione locale dei privilegi per Linux Kernel 4.13 testato su Ubuntu. L'exploit utilizza una fuga di informazioni CVE-2017-14954 per bypassare KASLR, una lettura arbitraria...

CVE-2018-6065-exploit

Chrome V8 CVE-2018-6065 Exploit Análise no blog: https://b1tg.github.io/post/cve-2018-6065-analysis root@kitploit: git reset 0407506af3d9d7e2718be1d8759296165b218fcf --hard gclient sync -f tools/dev/v8gen.py x64.debug ninja -C out.gn/x64.debug tools/dev/v8gen.py x64.release ninja -C...

satellite

satellite Satellite is an web payload hosting service which filters requests to ensure the correct target is getting a payload. This can also be a useful service for hosting files that should be only accessed in very specific circumstances. Quickstart Guide 1. Install satellite on Ubuntu using th...

CVE-2022-0995

CVE-2022-0995 Ceci est mon exploit pour CVE-2022-0995, une écriture hors limites du tas dans le composant watchqueue du noyau Linux. Il utilise la même technique décrite dans https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. L'exploit cible Ubuntu 21.10 avec le...

nuubi

Nuubi Tools Scanner, Recon. Details root@kitploit: Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract link...

CVE-2022-2586

CVE2022-2586 Questo exploit è testato su Ubuntu 22.04 versione 5.15.0-25 generic Compilazione: root@kitploit: gcc exploit.c -no-pie -o exp -lmnl -lnftnl...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 e CVE-2023-32629 GameOverLay - PoC per l'Escape Root sul Sistema Host Reale Una Proof of Concept PoC interattiva e a più fasi per l'Escalation dei Privilegi Locali LPE che mira alle vulnerabilità OverlayFS del kernel Linux Ubuntu CVE-2023-2640 / CVE-2023-32629. A differenza dei soli...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

UBUNTU-CVE-2026-63072

Heap Buffer Overflow in CMS Key Unwrapping...

Ubuntu-GameOver-Lay

UbuntuP-GameOverLay Utilizzo di CVE-2023-2640 e CVE-2023-3262 per elevare i privilegi CVE 2023-2640 https://nvd.nist.gov/vuln/detail/CVE-2023-2640 Sui kernel Ubuntu che includono sia c914c0e27eb0 che "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", un utente non...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: root@kitploit: dive or you can dive with Docker directly: root@kitploit: alias dive="docker run -ti --...