56 matches found
CVE-2020-6514
CVE-2020-6514 The exploit When writing the exploit, I originally altered the SCTP packets sent to the target device by altering the source of WebRTC and recompiling it. This wasn’t practical for attacking closed source applications, so I eventually switched to using Frida to hook the binary of th...
heappy
🙂 Heappy: un editor de heap feliz Heappy es un editor basado en gdb/gef que te ayuda a manejar el heap durante el desarrollo de tus exploits. El proyecto debe considerarse una herramienta didáctica útil para comprender la evolución del heap durante el ciclo de vida del proceso. Se ha creado para...
shadow
shadow :: De Mysteriis Dom jemalloc shadow is a jemalloc heap exploitation framework. It has been designed to be agnostic of the target application that uses jemalloc as its heap allocator be it Android's libc, Firefox, FreeBSD's libc, standalone jemalloc, or whatever else. The current version 2....
heapinfo
HeapInfo As pwn lovers, while playing CTF with heap exploitation, we always need a debugger e.g. gdb for tracking memory layout. But we don't really need gdb if we want to see whether the heap layout same as our imagination or not. Hope this small tool helps us exploit easier ;. Why HeapInfo is...
how2heap
Explotación Educativa del Heap Este repositorio es para aprender diversas técnicas de explotación del heap. Usamos los lanzamientos de Libc de Ubuntu como el estándar de oro. Cada técnica está verificada para funcionar en las correspondientes versiones de Ubuntu. Puedes ejecutar apt source libc6...
cve-2011-3026-firefox
cve-2011-3026-firefox Example of exploiting CVE-2011-3026 on Firefox Linux/x86, from our Black Hat 2012 talk: "Exploiting the jemalloc Memory Allocator: Owning Firefox's Heap" Original slide deck available at: https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis Updated slide...
CVE-2018-9411
CVE-2018-9411 Exploit code for CVE-2018-9411 for MediaCasService. Note that this exploit is only provided for educational or defensive purposes; it is not intended for any malicious or offensive use. Full write-up for the vulnerability and the exploit is available on the Zimperium blog. If you ha...
CVE-2026-23479-Redis-UAF-Proof-of-Concept
🔥 CVE-2026-23479 – Redis UAF Proof of Concept Use-After-Free in RedisunblockClientOnKey leading to Remote Code Execution Proof of concept with GDB‑assisted exploitation educational / lab use only 📖 Overview CVE-2026-23479 is a critical Use‑After‑Free UAF vulnerability in Redis versions 7.2.0...
Astra Linux – Vulnerability in Chromium
The use of “after free” in DevTools in Google Chrome before version 111.0.5563.64 allowed a remote attacker who had convinced the user to engage in direct UI interaction to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
MINI-2Q7V-J2XM-3W42
Bulletin has no description...
CVE-2026-76041
creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:40+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:31+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824...
CVE-2026-74968
creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:26+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...
CVE-2026-74949
creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtix3ozgqv22...
CVE-2026-74943
Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
CVE-2026-19147 vulnerabilities
Vulnerabilities for packages: chromium...
binary-exploitation-labs
Binary Exploitation & Reverse Engineering Labs Hands-on labs...
Exploit for Out-of-bounds Write in Gnu Glibc
CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsyslog...
Binary_Exploitation_Material
Binary Exploitation Material Personal collection of binary ex...
