IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC Lokale Sicherheitsumgehung Interprozesskommunikation über gemeinsam genutzten Speicher ist ein Konzept, bei dem zwei oder mehr Prozesse auf den gemeinsamen Speicher zugreifen können. Die Kommunikation erfolgt über diesen gemeinsam genutzten Speicher, wobei Änderunge...

CVE-2015-6086

Vom Absturz zum Exploit: CVE-2015-6086 - Out-of-Bound Read/ASLR-Bypass root@kitploit: $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ $$\ $$ | $$ |$$ | $$ $$\ $$$ $$\ $$$$ | $$ | $$ $$\ $$$ $$\ $$ $$\ $$ / |$$ | $$ |$$ | / $$ |$$$$\ $$ |$$ | $$ | $$ / |$$$$\ $$...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

Exploit personalizzato : Foxit Reader versione 9.0.1.1049 Use After Free con bypass di ASLR e DEP sull'heap Il mio exploit personalizzato : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Exploit personalizzato per Win 7 Ha spazio per lo shellcode La mia catena...

CVE-2015-8522.RCE

CVE-2015-8522 L'applicazione Tivoli FastBack Server 6.1.4 è vulnerabile a un buffer overflow basato sullo stack che consente agli attaccanti di ottenere esecuzione arbitraria di codice ACE tramite una connessione TCP remota. Il PoC fornito in questo repository sfrutta questa vulnerabilità sia per...

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32 बिट यह संस्करण डाउनलोड करें : https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe ASLR, DEP को बायपास करता है CFG को बायपास नहीं करता विश्लेषण टीम ब्लॉग टीम सदस्य ब्लॉग - mntly Adobe root...

ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

CVE-2025-0282-Full-version

Storks: Tool zur Ausnutzung von Remote Code Execution-Schwachstellen Überblick Storks ist ein Python-basiertes Proof-of-Concept PoC-Tool, das eine kritische Remote Code Execution RCE-Schwachstelle demonstriert, identifiziert als CVE-2025-0282 , in einem bestimmten Netzwerkgerät. Diese Schwachstel...

Jump-over-ASLR-BTB

Branch-Prädiktoren & ASLR Autor: Byte Reaper Beschreibung Dieses Repository enthält eine C-Implementierung für Forschungszwecke, die Konzepte im Zusammenhang mit Branch-Prädiktoren, spekulativer Ausführung und Cache-basierten Seitenkanälen im Kontext der Address-Space-Layout-Randomization ASLR...

CVE-2026-74339

A flaw was found in the ALSA Advanced Linux Sound Architecture sequencer component of the Linux kernel. A local attacker, by writing a direct variable event to itself, can read back a kernel memory address from the returned event header. This information disclosure could potentially be used to...

Exploit for CVE-2026-14669

CVE-2026-14669 - PostgreSQL tochar Time Zone Abbreviation H...

CVE-2026-43630

A flaw was found in llama.cpp. This out-of-bounds read vulnerability in the recurrent memory state restore path allows attackers with write access to the slot save directory to read memory beyond its allocated boundary. By crafting a malicious slot file with an oversized sequence identifier seqid...

CVE-2026-71391

A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An off-by-one error can occur when a specially crafted font file is processed due to an improper bounds check. This can cause a heap-based buffer over-read, exposing heap memory contents. Mitigation Do not load untrusted font...

DEBIAN-CVE-2026-71391

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...

CVE-2026-71391

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...

CVE-2026-71391 Off-by-One Error in GNU Emacs for Android

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...

Linux Distros Unpatched Vulnerability : CVE-2026-71391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared- coordinate index boundary check in sfntvarysimpleglyph an...

CVE-2026-66038

FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap memory by supplying a valid zlib stream that inflates to fewer bytes than the expected frame size. The zlibdecomp functi...

BIT-NGINX-2026-42533 NGINX Map directive and Regex matching vulnerability

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

CVE-2026-63091

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64MAX, which results in a negative offt value. Attackers...

CVE-2026-63091 ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64MAX, which results in a negative offt value. Attackers...