CVE-2022-0778-POC

A simple remote triggering POC for CVE-2022-0778 Why While trying to validate whether server implementations on our side where/are vulnerable to CVE-2022-0778, it proved extremely cumbersome to do so remotely. Instructions to create maliciously crafted certificates to trigger the parsing bug in...

writeup_split

Abstract CVE-2024-0684 A vulnerability in the GNU coreutils "split" program allows for a heap buffer overflow with user controlled data. It was introduced in 40bf1591bb4362fa91e501bcec7c2029c5f65a43 on 2023-03-04. A fix has been released with c4c5ed8f4e9cd55a12966d4f520e3a13101637d9 on 2024-01-17...

CVE-2020-15999

CVE-2020-15999 CVE-2020-15999 Added font with SBIX table based on Arial - https://docs.microsoft.com/en-us/typography/opentype/spec/sbix Crashes in ftview asan.png but somehow cannot bring Chrome to crash Flags are also not correctly set so loadsbitimage is also not called. Weird. Calling it like...

Dosinator

DoSinator DoSinator is a powerful Denial of Service DoS testing tool developed in Python. Designed for security professionals and researchers, this tool allows them to simulate various DoS attacks, providing a realistic environment for assessing the resilience of networks, systems, and applicatio...

tkeypoc

PoC for CVE-2015-5477 BIND9 TKEY DoS This code sends UDP packet that crashes vulnerable BIND9 DNS servers. root@kitploit: elceef@osiris:/tkeypoc$ ./tkeypoc.py localhost CVE-2015-5477 BIND9 TKEY PoC Sending packet to localhost ... Done...

peanalyzer

peanalyzer Advanced Portable Executable File Analyzer Python 3.5.2 : Tested Working Usage python peanalyzer.py --file file.exe --show all|file-path|general|dos-header|file-header|optional-header|data-directory|section-headers|imports python peanalyzer.py --file file.exe --disassemble all...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

CVE-2026-84543

CVE-2026-84543 is an out-of-bounds access vulnerability in macOS SMB server connection handling, addressed with improved bounds checking. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory . The issue is fixed in macOS Golden Gate 27 , macOS Sequ...

EUVD-2026-78106

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

EUVD-2026-77933

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

EUVD-2026-77920

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65357

CVE-2026-65357 is a memory handling flaw affecting multiple Apple operating systems. An app may be able to cause unexpected system termination or write kernel memory , indicating a potential integrity risk at the kernel level. The issue was addressed with improved memory handling and is fixed in ...

CVE-2026-49975-POC

CVE-2026-49975 — HTTP/2 Bomb PoC Proof-of-concept exploit for CVE-2026-49975, a remote denial-of-service vulnerability in HTTP/2 server implementations. Discovered by Quang Luong Calif Security Research, disclosed June 2, 2026. For authorized security testing only. Do not use against infrastructu...

CVE-2026-43790

CVE-2026-43790 is a memory handling flaw in macOS that allows a remote attacker to cause unexpected system termination or corrupt kernel memory . The fix is available in macOS Golden Gate 26.7 , macOS Sequoia 15.8 , and macOS Tahoe 27 . No CVSS metrics or active exploitation details are provided ...

EUVD-2026-78045

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D scene may lead to...

CVE-2026-84526

CVE-2026-84526 is an out-of-bounds write in Apple's 3D scene processing, fixed via improved bounds checking. Processing a maliciously crafted 3D scene may lead to unexpected process termination . The vulnerability affects multiple Apple platforms: iOS 26.7 / iPadOS 26.7 , iOS 27 / iPadOS 27 , mac...

EUVD-2026-78041

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84588

CVE-2026-84588 is a memory corruption vulnerability in macOS Golden Gate 27 (Apple). The root cause is vulnerable code that was removed in the fix. The attack vector involves mounting a maliciously crafted disk image , which may lead to unexpected system termination or kernel memory corruption . ...

EUVD-2026-77998

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84520

CVE-2026-84520 is a buffer overflow in macOS Golden Gate 27 , addressed through improved size validation. A local attacker may be able to cause unexpected system termination or corrupt kernel memory , indicating potential denial-of-service or integrity implications at the kernel level. The issue ...