flow_divert-heap-overflow

flowdivert-heap-overflow flowdivert-heap-overflow is a proof-of-concept exploit for CVE-2016-1827, which was patched in OS X El Capitan 10.11.5 and iOS 9.3.2. The vulnerability is a series of unchecked arithmetic operations on an untrusted length supplied from user space in the function...

CVE-2026-109964

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

CVE-2026-109964

Versions of ImageMagick before 7.1.2-33 and 6.9.13-58 are vulnerable to a heap buffer underwrite in the DecodeImage() function located in coders/pict.c . This issue specifically affects 32-bit builds and is caused by pointer arithmetic overflow . An attacker can provide a crafted PICT file with m...

CoBRA

CoBRA Co efficient-B ased R econstruction of A rithmetic — a Mixed Boolean-Arithmetic expression simplifier. CoBRA deobfuscates expressions that interleave arithmetic +, -, with bitwise &, |, ^, and shift operators — a technique commonly used in software obfuscation. $ cobra-cli --mba "x&y+x|y" x...

obfuscation_analysis

Obfuscation Analysis v1.3 Authors: Tim Blazytko & Nicolò Altamura Analyze and simplify obfuscated code Description: Obfuscation Analysis is a Binary Ninja plugin that takes the pain out of working with heavily protected binaries. It bundles a handful of focused helpers that let you simplify...

USN-8915-1: FFmpeg vulnerabilities

Momoko Shiraishi discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2026-30754 It...

php_hack

This tool exploits a vulnerability called CVE-2019-11043, an instance of insecure pointer arithmatic, to gain access to poorly configured PHP servers. It can be downloaded here you will need to run it from the command line Usage: phphack target IP target port...

zirgen

Zirgen Circuit Compiler Zirgen is a compiler for a domain-specific language, also called "zirgen", which creates arithmetic circuits for the RISC Zero proof system. For the most part, users of RISC Zero should be writing their zkApps in Rust and using our RISC-V zkVM rather than building them...

HiTMS_steganography

HiTMS: A High-Throughput Multi-Stream Linguistic Steganography Framework Research code for linguistic steganography over LLM chat dialogues , with a single-stream baseline and a batched multi-stream HiTMS protocol that hides several independent secret messages at once and exploits GPU batching fo...

recipe-blog-encoding

recipe-blog-encoding !WARNING This project is entirely vibe-coded likely partially plagiarized from this repository and the author is a dumb-dumb who just thought the idea was funny Use SEO-gaming recipe preambles as a vehicle for encoding secret messages the prompt can really be anything though,...

msynth

msynth Autore: Tim Blazytko e Moritz Schloegel msynth è un framework di deoffuscamento del codice per semplificare espressioni Mixed Boolean-Arithmetic MBA. Dato un oracolo di semplificazione precalcolato, attraversa un'espressione complessa rappresentata come albero sintattico astratto AST e ten...

SoliditySecurity

What's this This post aims to be a relatively in-depth and up-to-date introductory post detailing the past mistakes that have been made by Solidity developers in an effort to prevent future devs from repeating history. Table of Contents 1. Re-Entrancy The Vulnerability Preventative Techniques...

CVE-2026-107730

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...

pairing

Optimizations for Pairing-Based Cryptography This repository contains the working Rust code that corresponds to an ongoing series of blog posts covering optimizations in pairing-based cryptography using BLS12-381 as the reference curve. Please note: This code is for educational purposes, has not...

CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

Ivanti EPMM pre-auth RCE Dummy Target A simple demo application that shows how to reproduce the Ivanti EPMM pre-auth RCE vulnerability CVE-2026-1281 / CVE-2026-1340 for educational and security research purposes. Vulnerability Overview This vulnerability exploits Bash arithmetic expansion behavio...

CVE-2026-1281-Ivanti-EPMM-RCE

CVE-2026-1281 & CVE-2026-1340 - Ivanti EPMM Pre-Auth RCE ⚠️ DISCLAIMER: This PoC is provided solely for educational and security research purposes. Unauthorized use is illegal. 🎯 Description Complete Proof of Concept PoC for exploiting the CVE-2026-1281 and CVE-2026-1340 vulnerabilities affecting...

cve-2019-6250-lab

CVE-2019-6250 — Laboratorio de RCE pre-autenticación en libzmq Cadena RCE funcional de extremo a extremo + laboratorio reproducible para CVE-2019-6250 , el desbordamiento de búfer en el heap previo a la autenticación en v2decodert::sizeready de libzmq. Un desbordamiento aritmético de puntero...

CVE-2026-98349

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipwprocessproberesponse and the libipwnetworkinit call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and ipw2200...

DEBIAN-CVE-2026-98282

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommutcecheckioba The commit b1af23d836f8 "KVM: PPC: iommu: Unify TCE checking" unified IOBA parameter checking across KVM and VFIO into iommutcecheckioba. While doing so, the passed ...

CVE-2026-98282

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommutcecheckioba The commit b1af23d836f8 "KVM: PPC: iommu: Unify TCE checking" unified IOBA parameter checking across KVM and VFIO into iommutcecheckioba. While doing so, the passed ...