CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote-Codeausführung durch Use-After-Free in JScript.dll CVE-2025-30397 🧠 Beschreibung Dieses Repository enthält einen Proof-of-Concept-Exploit PoC für eine Use-After-Free-Schwachstelle in der JScript-Engine jscript.dll, die Windows...

CVE-2010-2883

CVE-2010-2883 PoC para CVE-2010-2883 usando pesquisa TTD, técnicas do Metasploit, BOF+ROP e heap spraying apenas para fins educacionais...

cve-2012-1889

heapspray Wie man präzises Heap-Spraying durchführt demo Praktische Demonstration...

CVE-2024-6387

CVE-2024-6387 CVE-2024-6387 ist ein hypothetisches Beispiel, aber nehmen wir an, es handelt sich um eine reale Schwachstelle in der OpenSSH-Serverimplementierung. Diese Schwachstelle könnte einen Pufferüberlauf oder einen Speicherfehler beinhalten, der es entfernten Angreifern ermöglicht,...

MS17-010

MS17-010 Este repositório é para o meu trabalho público sobre o MS17-010. Não tenho planos de oferecer suporte. Todas as questões de suporte não receberão resposta minha. Ficheiros BUG.txt Detalhes do bug do MS17-010 e alguma análise checker.py Script para encontrar named pipe acessível...

Python-precise-heap-spraying-

Python-precise-heap-spraying- Python: Präzises Heap-Spraying 0c0c0c0c...

Linux-ExploitDev

Linux Kernel Exploitation Notes In progress — notes are a...

Exploit for CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Heartbleed's...

Classic-Heap-Attacks-POCs-Windows-10

Pruebas de concepto contra el heap de Windows En este reposit...

Exploit for Use of Uninitialized Resource in Microsoft

Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...

Exploit for Use of Uninitialized Resource in Microsoft

Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...

Exploit for Out-of-bounds Write in Adobe Acrobat

CVE-2010-2883 PoC for CVE...

Exploit for Use of Uninitialized Resource in Vmware Fusion

This is a VMware Escape Exploit, a proof-of-concept PoC exploit for CVE-2017-4905, targeting VMware WorkStation 12.5.5 and earlier versions. The exploit is designed to escape the VMware environment and execute arbitrary code on the host system. The exploit is written in C and uses a heap...

AutoBlue-MS17-010

This is a semi-automated, fully working, no-bs, non-metasploit version of the public exploit code for MS17-010. The exploit is designed to target Windows systems vulnerable to the EternalBlue vulnerability, which is a remote code execution RCE vulnerability in the SMBv1 protocol. The exploit code...

Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)

!/usr/bin/env python3 Exploit Title: Microsoft Windows Server 2025 JScript Engine - Remote Code Execution RCE Exploit Author: Mohammed Idrees Banyamer Instagram: @@banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-05-31 CVE: CVE-2025-30397 Vendor: Microsoft Affected Versions: Windo...

Exploit for Type Confusion in Microsoft

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Fre...

Exploit for Type Confusion in Google Chrome

Chrome Renderer 1day RCE via Type Confusion in Async Stack Tra...

Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel

Details have emerged about a recently patched critical remote code execution vulnerability in the V8 JavaScript and WebAssembly engine used in Google Chrome and Chromium-based browsers. The issue relates to a case of use-after-free in the instruction optimization component, successful exploitatio...

Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass

Posted by Samuel Groß, Project Zero This post is the second in a series about a remote, interactionless iPhone exploit over iMessage.The first blog post, which introduced the exploited vulnerability, can be found here. The initial primitive gained from the vulnerability is an absolute address...

Analyzing an exploit for СVE-2017-11826

The latest Patch Tuesday 17 October brought patches for 62 vulnerabilities, including one that fixed СVE-2017-11826 – a critical zero-day vulnerability used to launch targeted attacks – in all versions of Microsoft Office. The exploit for this vulnerability is an RTF document containing a DOCX...