cve-2014-7911-exp

cve-2014-7911-exp exploit for cve-2014-7911; android; java deserialization ;system privilege;ace; This exp refers to retme7's exp,but the rop chain is different. And the most important part is Chunk Spray. Hope it will help. environment device:nexus5 os version:Android4.4.4...

ACE

Automated Collection and Enrichment The Automated Collection and Enrichment ACE platform is a suite of tools for threat hunters to collect data from many endpoints in a network and automatically enrich the data. The data is collected by running scripts on each computer without installing any...

ezwinrar

ezwinrar Python tool exploiting CVE-2018-20250 found by CheckPoint folks : https://research.checkpoint.com/extracting-code-execution-from-winrar/ By crafting the filename field of the ACE format, the destination folder extraction folder is ignored, and the relative path in the filename field...

opace6-cve-2026-64560

OnePlus Ace 6 Temporary Root Tool Obtain temporary root privileges for the current boot session on OnePlus Ace 6 via CVE-2026-64560 Linux kernel POSIX CPU timer UAF. Invalidated after reboot, does not modify system partitions. !WARNING May cause device reboot or data loss. Use only on your own...

CVE-2018-20250-WINRAR-ACE-GUI

CVE-2018-20250-WINRAR-ACE-GUI CVE-2018-20250-WINRAR-ACE Exploit with a UI. Original Code : https://github.com/blau72/CVE-2018-20250-WinRAR-ACE...

cpiopwn

cpiopwn CVE-2021-38185 This is an ACE POC of an integer overflow bug in cpio. This exploit bypasses all binary protections except full RELRO. This exploit uses cpio 2.13 and libc 2.31. Video demo: https://youtu.be/F0yKJhu7Vak Running the exploit We've provided a Kali Dockerfile to run the exploit...

CVE-2018-20250

CVE-2018-20250-3 010 Editor template for ACE archive format & CVE-2018-20250-3 ace.bt 010 editor template acefile.py open source ACE extractor, used for writing the template watchme.gif demo wace269i WinAce installer Disclaimer: All resources in this project are for technical research purposes on...

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE Proof of concept code in C to exploit the WinRAR ACE file extraction path CVE-2018-20250. Resources https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ Dependencies InvertedTomato.Cr...

opace6-cve-2026-64560

OnePlus Ace 6 Temporary Root Tool Obtain temporary root privileges for the current boot session on OnePlus Ace 6 via CVE-2026-64560 Linux kernel POSIX CPU timer UAF vulnerability. Invalidated after reboot, does not modify system partitions. !WARNING May cause device reboot or data loss. Use only ...

WinRar_ACE_exploit_CVE-2018-20250

WinRar ACE exploit CVE-2018-20250 This program is an script developed in Python which exploit the ACE vulnerability on WinRar - Vulnerability CVE-2018-20250 It is based on previous project developed by WyAtu It is used for educational purposes on Daniel Vispo Blog How to generate the evil exploit...

WindowsDACLEnumProject

Windows DACL Enum Project A collection of tools to enumerate and analyse Windows DACLs Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsDACLEnumProject Released under AGPL...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: It is required that the minimum ACE size is respected in smbcheckpermdacl. Both ACE-walking loops in smbcheckpermdacl only protect against an under-sized remaining buffer, not against an ACE whose declared ace-size is...

CLEANSTART-2026-XN09213 ACE vulnerability in conditional configuration file processing by QOS

Security vulnerability affects the trino package. ACE vulnerability in conditional configuration file processing by QOS...

KLA91326 Multiple vulnerability in Microsoft Dynamics

Multiple vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-88131 Exploitation Related products Microsoft-Dataverse CVE list CVE-2026-88131 critical KB list Solution...

ace-vim-neovim

ace-vim-neovim Ejecución de código arbitrario en Vim/Neovim mediante modelines CVE-2019-12735 Uso 1. escucha nc -vlp 9999 2. ejecuta vim pocshell.txt Y entonces, tu localhost obtendrá una shell...

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

Overview A critical Arbitrary Code Execution ACE vulnerability exists in the Knowns Language Server Protocol LSP detection and startup pipeline. The system blindly trusts the settings.lsp.languages..binary field defined in the project-level .knowns/config.json file. Because this field is never...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: corrected the incorrect validation of the numaces field in smbacl. parsedcal now validates numaces to allocate an array of posixacestatearray. If numaces is greater than ULONGMAX / sizeofstruct smbace++, it results in a...

5mghost-rover (>=0.0.1, <=0.0.3), ace-framework (>=0.6.0, <=0.7.3) +183 more potentially affected by CVE-2026-102999 via pypdf (>=6.0.0, <=6.18.1)

pypdf PYPI version =6.0.0, =0.0.1, =0.6.0, =0.1.0, =0.0.2, =0.1.0, =0.0.24, =0.0.0, =1.1.0, =0.1.2, =0.0.1.dev0, =1.0.0a3, =0.1.3, =0.1.8 and more Source cves: CVE-2026-102999 Source advisory: OSV:PYSEC-2026-4159...

5mghost-rover (>=0.0.1, <=0.0.3), ace-framework (>=0.6.0, <=0.7.3) +180 more potentially affected by CVE-2026-102993 via pypdf (>=6.0.0, <=6.16.2)

pypdf PYPI version =6.0.0, =0.0.1, =0.6.0, =0.1.0, =0.0.2, =0.1.0, =0.0.24, =0.0.0, =1.1.0, =0.1.2, =0.0.1.dev0, =1.0.0a3, =0.2.0, =0.3.0 and more Source cves: CVE-2026-102993 Source advisory: OSV:PYSEC-2026-4158...

5mghost-rover (>=0.0.1, <=0.0.3), ace-framework (>=0.6.0, <=0.7.3) +183 more potentially affected by CVE-2026-102998 via pypdf (>=6.0.0, <=6.18.1)

pypdf PYPI version =6.0.0, =0.0.1, =0.6.0, =0.1.0, =0.0.2, =0.1.0, =0.0.24, =0.0.0, =1.1.0, =0.1.2, =0.0.1.dev0, =1.0.0a3, =0.1.3, =0.1.8 and more Source cves: CVE-2026-102998 Source advisory: SNYK:PYTHON-PYPDF-20415632...