CVE-2023-52356-libtiff-analysis

CVE-2023-52356 – libtiff TIFFReadRGBATileExt Analysis Overview This lab analyzes CVE-2023-52356 in libtiff, focusing on the behavior of TIFFReadRGBATileExt when it receives image coordinates outside the valid image bounds. The analysis includes reproduction of the original crash, debugging with...

exploitarium

https://discord.gg/WytKH65ZR 加入我们的社区，获取研究、帮助、文档以及其他对感兴趣者有用的信息。 声明 该仓库发布时并不完整。 关于 AI 的使用，我的模糊测试工作流是由 AI 按照严格流程自动化的。我使用了 GPT-5.3 进行所有的模糊测试，因为当提供了高效的工作流时，几乎不需要任何"思考"。与那种我只是个随意烧 token 的孩子的流行说法相反，我确实拥有该学科的学位，并且发表了多篇关于模糊测试方法的论文。我花了数年时间研究和开发新的模糊测试工具和思路。你不需要一个 SOTA...

MGASA-2026-0379 Updated exiv2 package fixes security vulnerabilities

Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds. CVE-2026-68546 Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. CVE-2026-68547 Out of bounds read in CrwMap::decodeBasic. CVE-2026-49275...

CVE-2026-31694-POC

CVE-2026-31694: FUSE readdir cache out-of-bounds write A missing bounds check in fs/fuse/readdir.c:fuseadddirenttocache. A FUSE server returns a dirent with namelen = 4095, which serializes to a 4120-byte record. The kernel copies it into a single 4096-byte page-cache page and overflows by 24...

CVE-2024-1939

CVE-2024-1939 This is a short writeup for the CVE-2024-1939, which I used to claim V8CTF M122. The root cause of this issue is the lack of support for kWasmS128 in wasm-to-js conversion. Specifically, wasmS128Const operations occurring in parameter stacks are ignored, leading to type confusion wh...

CVE-2026-55200

🚨 CVE-2026-55200 - Critical libssh2 Out-of-Bounds Write Vulnerability 📌 Overview CVE-2026-55200 is a critical memory corruption vulnerability affecting the widely deployed libssh2 library. The flaw arises from improper validation of the SSH packet length field during packet processing, potentiall...

CVE-2023-36407

CVE-2023-36407 This is poc for CVE-2023-36407, Hyper-V Elevation of Privilege Vulnerability. https://github.com/pwndorei/CVE-2023-36407/assets/96749184/a8ef87d3-e0d0-40e5-9b23-35ab057a9c78 Vulnerability OOB Read/Write from/to Non-paged Pool via winhvr.sys!WinHvGet/SetVpState Reproduction Steps...

BlueGate

BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...

USN-8734-1 php7.0 vulnerabilities

It was discovered that PHP incorrectly handled Apache map decoding in SOAP servers with a typemap configured. A remote attacker could use this issue to cause a NULL pointer dereference, resulting in a denial of service. CVE-2026-7262 It was discovered that PHP incorrectly handled signed integer...

mongobleed-scanner

MongoBleed CVE-2025-14847 MongoBleed is a high-performance PoC scanner for CVE-2025-14847, a pre-authentication heap memory disclosure vulnerability in the MongoDB C++ Driver. The tool is designed for rapid identification of vulnerable instances across large network ranges. Technical Analysis The...

CVE-2026-86303

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for...

CVE-2022-0995

CVE-2022-0995 This is my exploit for CVE-2022-0995, an heap out-of-bounds write in the watchqueue Linux kernel component. It uses the same technique described in https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. The exploit targets Ubuntu 21.10 with kernel...

spectre-attack-example

Spectre Attack Example January 2, 2018 CVE-2017-5753 and CVE-2017-5715 "Spectre" exploit example What is this? We place the text "The Magic Words are Squeamish Ossifrage." in memory, and then we attempt to read it using the vulnerability. If the system is vulnerable, you will see the same text on...

CVE-2021-22555-Exploit

CVE-2021-22555-Exploit CVE-2021-22555 Exploit By Andy Nguyen INFO A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This allows an attacker to gain privileges or cause a DoS via heap memory corruption through user name space 編譯 root@kitploit:...

CVE-2020-1493

CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Windows 10 1909 x64, Also This vulnerability is zero click vulnerability. TLDR; I found this bug usng winafl fuzzer. This bug occured when parsing ms-tnef file. that attachement of eml file. vulnerable method re...

CVE-2021-42008

CVE-2021-42008 CVE-2021-42008: Exploiting A 16-Year-Old Vulnerability In The Linux 6pack Driver Vulnerability analysis and exploit development: https://syst3mfailure.io/sixpack-slab-out-of-bounds Exploit designed for: root@kitploit: Debian 11 - Kernel 5.10.0-8-amd64...

CVE-2026-86303

CVE-2026-86303 affects the 92181 markdown C library (GitHub repo 92181/markdown). The vulnerability is an out-of-bounds read in the function lds within md.c. The flaw can be triggered remotely with no authentication or user interaction required, carrying a CVSS 3.1 score of 7.3 (HIGH) with low im...

CVE-2026-86303 92181 markdown md.c lds out-of-bounds

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for...

EUVD-2026-72359

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for...

CVE_2026_31694

CVE-2026-31694 Passive Scanner A passive Linux host assessment tool for CVE-2026-31694 , a FUSE readdir-cache out-of-bounds write in the Linux kernel. The scanner evaluates the running kernel, FUSE exposure, local package metadata, kernel source evidence, execution environment, and operating-syst...