CVE-2020-5902

Readme F5 BIG-IP 任意ファイル読み取り + リモートコマンド実行 RCE root@kitploit: +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE + +-------------------------------------------------------------+ + USE:...

Log4j-Rec-CVE-2021-44228

Log4j2再現ノート、学習用のみ 参照https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce 実行可能ファイルの作成 root@kitploit: com/example/template javac Log4jRCE.java Python標準のHTTPサーバーを起動 root@kitploit: com/example/template python -m http.server 8888 LDAPサーバーを起動 root@kitploit: tools java -cp...

CVE-2021-31166

CVE-2021-31166 0x00.Description これはCVE-2021-31166（「HTTP Protocol Stack Remote Code Execution Vulnerability」）の概念実証です。Microsoftが2021年5月にパッチを公開したhttp.sysにおけるuse-after-free解放後使用の逆参照です。 私の知る限り、これはプログラムのクラッシュを引き起こすことしかできません。使用には注意してください。 0x01.Impact Windows Server, version 20H2 Server Core Installation...

cve-2021-44228-log4shell_rce_reproduction

CVE-2021-44228 — Log4Shell: Ejecución Remota de Código en Apache Log4j2 CVSS 10.0 CRÍTICO | CWE-502: Deserialización de Datos No Confiables | CWE-917: Neutralización Incorrecta para Inyección de Lenguaje de Expresión Resumen Log4Shell CVE-2021-44228 es posiblemente la vulnerabilidad más grave de ...

EUVD-2026-74651

Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code...

CVE-2026-21110

CVE-2026-21110 is an out-of-bounds write vulnerability in libsavscmn.so affecting Samsung devices running One UI prior to 8.5 . A local attacker with low privileges can exploit this flaw to achieve arbitrary code execution on the vulnerable system. The CVSS 4.0 base score is 6.9 (MEDIUM) , reflec...

CVE-2026-21110

Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code...

CVE-2026-21104

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...

EUVD-2026-74645

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2026-21104

CVE-2026-21104 is a heap-based buffer overflow in the KnoxVault trustlet on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . The flaw allows a local privileged attacker to achieve arbitrary code execution . The CVSS 4.0 base score is 7.1 (HIGH) , with a local attack ve...

CVE-2026-21102

This critical (CVSS 4.0: 9.3) vulnerability is a use-after-free in the DualDAR component of Samsung mobile devices, prior to the SMR September 2026 Release 1 . A local privileged attacker can leverage the flaw to execute arbitrary code with root privileges , resulting in high impact on confidenti...

CVE-2026-21102

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege...

EUVD-2026-74643

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege...

EUVD-2026-74642

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

CVE-2026-21101

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

CVE-2026-21101

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

CVE-2026-21101

CVE-2026-21101 addresses an improper input validation flaw in the DualDAR driver on Samsung Mobile devices. The defect allows local privileged attackers to potentially execute arbitrary code with root privilege , resulting in high impact to confidentiality, integrity, and availability of the vuln...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21096

CVE-2026-21096 is a heap-based buffer overflow in the JPEG decoder of libimagecodec.quram.so in Samsung Mobile devices, prior to the SMR Sep-2026 Release 1 . The vulnerability allows remote attackers to execute arbitrary code, with no user interaction or privileges required, though the attack req...