Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-shield 한국어 Stopgap protection for...

TomcatKiller-CVE-2025-31650

TomcatKiller-CVE-2025-31650 A tool designed to detect the vulnerability CVE-2025-31650 in Apache Tomcat versions 10.1.10 to 10.1.39 This vulnerability allows an attacker to trigger a memory leak by sending specially crafted HTTP/2 requests with invalid priority headers, leading to a...

CVE-2025-14177

CVE-2025-14177 — PHP getimagesize Heap Memory Leak For authorized penetration testing and security research only. Vulnerability Field| Value ---|--- CVE| CVE-2025-14177 CWE| CWE-524 Use of Uninitialized Resource Severity| MODERATE — CVSS 6.3 Root cause| phpreadstreamallchunks writes successive...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-waf Virtual patch / WAF rules สำหรับช่องโหว่ PHP2...

CVE-2025-5777

CVE-2025-5777 - Citrix NetScaler Memory Leak Exploit 📌 Overview This tool demonstrates CVE-2025-5777 , a critical memory disclosure vulnerability in Citrix NetScaler ADC/Gateway devices. The exploit leaks sensitive memory contents via malformed authentication requests. Key Features: ✔ Memory leak...

unidbg

unidbg Allows you to emulate an Android native library, and an experimental iOS emulation. This is an educational project to learn more about the ELF/MachO file format and ARM assembly. Use it at your own risk ! Features Support MCP Model Context Protocol for AI-assisted debugging with Cursor and...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 Citrix Netscaler memory overread Citrix Netscaler overread Detection Artifact Generator Tool! Detection in Action This Detection Artifact Generator will accept a target Netscaler device, and attempt to leak memroy via CVE-2026-8451. All it needs is the target system. Include the...

CVE-2025-14847

MongoDB CVE-2025-14847 Vulnerability Detection Tool MongoDB Memory Leak Vulnerability CVE-2025-14847 Detection Tool ⚠️ Important: This tool is for authorized security testing and vulnerability assessment only. Unauthorized use may violate the law. 📋 Table of Contents Vulnerability Description...

CVE-2023-32784-kdbxpassdmp

keepassdumper.py Python port of vdohney/keepass-password-dumper CVE-2023-32784 — all credit for the original C implementation and the underlying technique goes to vdohney. The script scans a process memory dump for the leftover render strings that KeePass 2.x's SecureTextBoxEx leaves behind while...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

CVE-2026-98697

A flaw was found in the Linux kernel's USB serial subsystem. A race condition during USB serial driver deregistration can result in a kernel memory leak. A local user with permissions to modify driver attributes can trigger this issue by writing to the dynamic identifier interface while the drive...

MongoBleed

MongoBleed CVE-2025-14847 Scanner and Exploitation Toolkit A security research toolkit for MongoBleed -- a critical unauthenticated memory leak in MongoDB's zlib decompression that allows attackers to extract sensitive data from server heap memory without authentication. ╔╦╗┌─┐┌┐┌┌─┐┌─┐╔╗ ┬...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this script...

CVE-2026-98692

A flaw was found in the Linux kernel's Thunderbolt subsystem. DisplayPort DP tunnels activated without a required completion callback fail to release object references during tunnel setup, such as when restoring from system hibernation. A local user or repeated hibernation cycles can cause kernel...

ctf

CTF Related stuff Table of Contents The challs are linked in the table below. Description| Event/Game| Solution ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| An exe with a "login" functionality with the password in plain text in the memory. Blackbox| Level 2| An exe with setuid for...

swapgs-attack-poc

PoC for the SWAPGS attack CVE-2019-1125 This repository holds the sources for the SWAPGS attack PoC publicly shown at Black Hat USA, 2019. Contents leakgsbkva - variant 1 look for random values in kernel memory; limited to PE kernel image header leakgsbkvat - variant 2 extract random values from...

Linux-Kernel-local-DoS

Linux-Kernel-local-DoS Local linux kernel DoS based on memleak from an unpriv user, just need to do a PRTIMERCREATERESTOREIDSON prctl first based on https://x.com/spendergrsec/status/1990887509664928062...

CVE-2026-98680

A flaw was found in the Linux kernel's Kionix KX022A accelerometer sensor driver. When enabling the device buffer fails during register configuration, the driver fails to properly free allocated memory or restore previous hardware states. A local user could trigger this error condition to cause a...

shodanwave

Shodanwave Shodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online. What does the tool to? Look, a list! Search Brute force SSID and WPAPSK Password...

drmemory

Dr. Memory: the memory debugger About Dr. Memory Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory including outside of allocated heap units and heap underflow and overflow,...