92 matches found
CVE-2010-2883
CVE-2010-2883 PoC für CVE-2010-2883 unter Verwendung von TTD-Forschung, Metasploit-Techniken, BOF+ROP und HEAP-Spraying nur für Bildungszwecke...
Python-precise-heap-spraying-
Python-precise-heap-spraying- Python: Präzises Heap-Spraying 0c0c0c0c...
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote-Codeausführung durch Use-After-Free in JScript.dll CVE-2025-30397 🧠 Beschreibung Dieses Repository enthält einen Proof-of-Concept-Exploit PoC für eine Use-After-Free-Schwachstelle in der JScript-Engine jscript.dll, die Windows...
CVE-2024-6387
CVE-2024-6387 CVE-2024-6387 é um exemplo hipotético, mas vamos supor que seja uma vulnerabilidade real na implementação do servidor OpenSSH. Esta vulnerabilidade poderia envolver um estouro de buffer ou corrupção de memória que permite a atacantes remotos executar código arbitrário no servidor...
MS17-010
MS17-010 यह रिपॉज़िटरी MS17-010 पर मेरे कार्य को सार्वजनिक करने के लिए है। मेरी कोई समर्थन देने की योजना नहीं है। सभी समर्थन मुद्दों पर मेरी ओर से कोई प्रतिक्रिया नहीं मिलेगी । फ़ाइलें BUG.txt MS17-010 बग विवरण और कुछ विश्लेषण checker.py सुलभ named pipe खोजने के लिए स्क्रिप्ट eternalblueexploit7....
cve-2012-1889
heapspray Wie man präzises Heap-Spraying durchführt demo Praktische Demonstration...
Exploit for CVE-2026-47729
🦑 CVE-2026-47729 - Squidbleed ⚠️ Heartbleed's...
Classic-Heap-Attacks-POCs-Windows-10
Pruebas de concepto contra el heap de Windows En este reposit...
Exploit for Use of Uninitialized Resource in Microsoft
Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...
Exploit for Use of Uninitialized Resource in Microsoft
Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...
Exploit for Out-of-bounds Write in Adobe Acrobat
CVE-2010-2883 PoC for CVE...
Exploit for Use of Uninitialized Resource in Vmware Fusion
This is a VMware Escape Exploit, a proof-of-concept PoC exploit for CVE-2017-4905, targeting VMware WorkStation 12.5.5 and earlier versions. The exploit is designed to escape the VMware environment and execute arbitrary code on the host system. The exploit is written in C and uses a heap...
AutoBlue-MS17-010
This is a semi-automated, fully working, no-bs, non-metasploit version of the public exploit code for MS17-010. The exploit is designed to target Windows systems vulnerable to the EternalBlue vulnerability, which is a remote code execution RCE vulnerability in the SMBv1 protocol. The exploit code...
Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)
!/usr/bin/env python3 Exploit Title: Microsoft Windows Server 2025 JScript Engine - Remote Code Execution RCE Exploit Author: Mohammed Idrees Banyamer Instagram: @@banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-05-31 CVE: CVE-2025-30397 Vendor: Microsoft Affected Versions: Windo...
Exploit for Type Confusion in Microsoft
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Fre...
Exploit for Type Confusion in Google Chrome
Chrome Renderer 1day RCE via Type Confusion in Async Stack Tra...
Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel
Details have emerged about a recently patched critical remote code execution vulnerability in the V8 JavaScript and WebAssembly engine used in Google Chrome and Chromium-based browsers. The issue relates to a case of use-after-free in the instruction optimization component, successful exploitatio...
Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass
Posted by Samuel Groß, Project Zero This post is the second in a series about a remote, interactionless iPhone exploit over iMessage.The first blog post, which introduced the exploited vulnerability, can be found here. The initial primitive gained from the vulnerability is an absolute address...
Analyzing an exploit for СVE-2017-11826
The latest Patch Tuesday 17 October brought patches for 62 vulnerabilities, including one that fixed СVE-2017-11826 – a critical zero-day vulnerability used to launch targeted attacks – in all versions of Microsoft Office. The exploit for this vulnerability is an RTF document containing a DOCX...
IE browser vulnerability integrated use of technology: the heap spray techniques-vulnerability warning-the black bar safety net
The browser was once the vulnerabilities wreak havoc on the hardest-hit areas, in the IE6 era often accidentally open a page will be caught. Even in the web the penetration circles also spread through the“Get shell hanging horse”such a word. Then this is the case when is a difference? I personall...