CVE-2026-21093

Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

heartbleed

Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...

nginxpwn

Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow This repository contains the nginx 1.4.0 source code as well as precompiled binaries with and without stack cookies. There's also a Vagrantfile for easy setup. Announcement and patch:...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 Exploit PoC Script with ROP Chain Table of Contents Description Affected Versions Installation Usage Example Output Technical Details Warnings References Description fgt-cve-2023-27997-exploit.py is a Proof‑of‑Concept PoC exploit script...

CVE-2025-27363-proof-of-concept

Proof-of-concept for CVE-2025-27363 that crashes FreeType 2.13.0. This modifies Roboto Flex, a variable font, so that the "%" character glyph 8 is now a composite glyph with 0xfffd subglyphs. Rendering the edited font with FreeType 2.13.0 the last version before the fix crashes, with ASAN detecti...

LiberationPlay-CVE-2025-24132-AirBourne-POC

LiberationPlay! CVE-2025-24132 AirBourne POC POC for CVE-2025-24132 AirBourne. Currently just triggers the overflow and causes a crash In an effort to try and gain root access to my car's head unit, I have researched and compiled everything I have learned about the Airplay Exploit CVE-2025-24132...

CVE-2023-38545

usage root@kitploit: git clone https://github.com/imfht/CVE-2023-38545 cd CVE-2023-38545/curl-7.74.0 && ./configure --with-openssl make -j 4 python3 socks.py & export ALLPROXY=socks5h://127.0.0.1:9050 ./curl-7.74.0/src/curl $python3 -c "print'A'10000, end=''" -vvvv proof for details please see:...

CVE-2026-21104

CVE-2026-21104 is a heap-based buffer overflow in the KnoxVault trustlet on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . The flaw allows a local privileged attacker to achieve arbitrary code execution . The CVSS 4.0 base score is 7.1 (HIGH) , with a local attack ve...

EUVD-2026-74645

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...

EUVD-2026-74637

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

EUVD-2026-74636

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

CVE-2026-21095 is a heap-based buffer overflow in the DNG decoder of the libimagecodec.quram.so library on Samsung mobile devices. The vulnerability allows remote attackers to achieve arbitrary code execution by supplying a crafted DNG image file, with the attack vector rated as network-based, lo...

CVE-2014-0160

CVE-2014-0160 Lab setup using Heartbleed to leak memory from webapps This repo focuses on building a container to create an environment that can easily exploit nginx using the Heartbleed technique, focusing on: Setting up the environment using Docker Server setup diagram Demo steps Server diagram...

CVE-2021-38297

Exploiting CVE-2021-38297: Vulnerability in GO Wasm Buffer Overflow Overview of the Vulnerability WebAssembly WASM serves as a binary instruction format executable in most modern web browsers. It acts as a compilation target for various high-level languages like C, C++, Rust, and GO, allowing cod...

telnet_scan

Telnet Vulnerability Scanner CVE-2026-24061 & CVE-2026-32746 A Python-based security assessment tool that detects and where applicable exploits two critical vulnerabilities in GNU InetUtils telnetd: CVE-2026-24061 – Authentication bypass via USER environment variable injection CVSS 9.8...

cve-2022-0847dirtypipe-exploit

cve-2022-0847dirtypipe-exploit...

CVE-2018-4407-iOS-exploit

CVE-2018-4407 iOS Attack Exploit CVE-2018-4407 is a Simple and Very Fast BOF attack Against iOS/mac that can lead to DOS. The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and...

bandiview-7.05-vuln-PoC

bandiview-7.05-vuln-PoC This repository contains a PoC for vulnerabilities uncovered in Bandiview 7.05 using fuzzing CVE-2024-45870 JXR File Parsing DoS Vulnerability CVE-2024-45871 PSD File Parsing DoS Vulnerability CVE-2024-45872 PSD File Parsing Stack Buffer Overflow Details Software: BandiVie...