memaddressanalysis

Mem Address Analyzer Исследовательский проект, связанный с анализом пространства адресов памяти Выпущено как открытое программное обеспечение компанией NCC Group Plc - http://www.nccgroup.com/ Разработано для Linux: Aidan Marlin, aidan dot marlin at nccgroup dot com Разработано для Windows: Nikos...

CVE-2015-8522.RCE

CVE-2015-8522 L'application Tivoli FastBack Server 6.1.4 est vulnérable à un débordement de tampon basé sur la pile permettant à des acteurs malveillants d'obtenir une Exécution de Code Arbitraire ACE via une connexion TCP distante. Le PoC fourni dans ce dépôt exploite cette vulnérabilité à la fo...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 Vidéo d'exploitation et de correctif 0patch: https://www.youtube.com/watch?v=XU-U4K270Z4 Article de blog Qihoo 360...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 Видео эксплуатации и исправления от 0patch: https://www.youtube.com/watch?v=XU-U4K270Z4 Пост в блоге Qihoo 360...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit Contournement de sécurité local IPC La communication inter-processus via la mémoire partagée est un concept où deux processus ou plus peuvent accéder à une mémoire commune. Et la communication se fait via cette mémoire partagée où les modifications apportées par un...

CVE-2026-91946

A flaw was found in FreeRDP. This information disclosure vulnerability exists in the RDPGFX server's ResetGraphics Protocol Data Unit PDU serializer. It fails to properly initialize padding bytes, allowing a remote attacker to receive uninitialized heap memory. This can lead to the disclosure of...

CVE-2026-91963

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...

DEBIAN-CVE-2026-91963

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when...

EUVD-2026-78639

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when...

cve-2025-9951-ffmpeg-jp2-poc

CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ — the original deterministic GDB-launched PoC and its full research-journey writeup,...

CVE-2013-2028-x64-bypass-ssp-and-pie-PoC

pour contourner NX PIE SSP ASLR ce PoC n'est pas stable. parfois le service http s'arrêtera. vous devez corriger morecore-offset et choisir le bon fichier libc...

CVE-2025-0282-Full-version

Storks: Remote Code Execution Vulnerability Exploitation Tool Overview Storks is a Python-based Proof-of-Concept PoC tool designed to demonstrate a critical Remote Code Execution RCE vulnerability, identified as CVE-2025-0282 , in a specific network appliance. This vulnerability can be exploited ...

ExecASLR-ekoparty

ExecASLR - Abuser des prédicteurs de branche Intel pour contourner l'ASLR Qu'est-ce que l'ASLR L'Address Space Layout Randomization est une mitigation utilisée pour rendre plus difficile l'exploitation des attaques par corruption mémoire. Dans un scénario de vulnérabilité de débordement de tampon...

EUVD-2026-75058

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable Out-of-Bounds Read while processing RTPS DATAFRAG submessages. An attacker can craft a...

CVE-2026-22590 Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG  sampleSize / fragmentsInSubmessage

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable Out-of-Bounds Read while processing RTPS DATAFRAG submessages. An attacker can craft a...

CVE-2026-84267

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

CVE-2026-84267 Gvfs: sftp: uninitialized heap disclosure in read_string()

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

EUVD-2026-69296

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

CVE-2026-84267 Gvfs: sftp: uninitialized heap disclosure in read_string()

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

CVE-2026-84267

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...