CVE_2025_24257----NOT-MINE

🔧 CVE202524257----NOT-MINE - Run the Windows PoC Safely 🧾 Overview CVE202524257----NOT-MINE is a Windows proof of concept that shows a kernel memory bug in IOGPUFamily. It is based on a bitmapmask underflow that can lead to a kernel heap out-of-bounds write. This project is the first public PoC...

CVE-2019-6207

CVE-2019-6207 getdirentriesattr kernel heap inofo leak Esta vulnerabilidad puede desencadenarse en el sandbox en macOS=10.14.4 && iOS 12.2 Actualizaré más detalles sobre esta vulnerabilidad...

salt

Bienvenido a salt , una herramienta para hacer ingeniería inversa y aprender la gestión de memoria heap del kernel. Puede ser útil para desarrollar un exploit, depurar tu propio código del kernel y, más importante, jugar con las asignaciones del heap del kernel y aprender su funcionamiento intern...

node-cve-2018-4407

node-cve-2018-4407 Node.js PoC exploit code for CVE-2018-4407 Author: Sam Decrock This script is based on the scapy script provided by Zuk: iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC in a tweet: pip install scapy sudo scapy sendIPdst=“Target...

ctl_ctloutput-leak

ctlctloutput-leak The ctlctloutput function in macOS High Sierra 10.13 ignores the return value of a call to sooptcopyin, which opens up a race window to leak uninitialized kernel heap data to user space. ctlctloutput-leak is a proof-of-concept exploit that attempts to trigger this information...

EUVD-2026-93164

In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhiwwanmbim: check skbcopybits return value mhimbimrx ignores the return value of skbcopybits when it copies each datagram out of the NTB. The datagram offset and length come from the DPE, which is only checked to lie...

CVE-2026-98236

The Linux kernel contains a vulnerability in the mhi_wwan_mbim driver. The mhi_mbim_rx() function fails to check the return value of skb_copy_bits() when copying datagrams from the NTB . Because the DPE is only checked against the NTB boundaries, a modem can provide an offset pointing outside the...

CVE-2019-6207

CVE-2019-6207 esta vulnerabilidad puede ser desencadenada en el sandbox en macOS wop == NETRTFLAGS || w-wop == NETRTFLAGSPRIV && !rt-rtflags & w-warg goto done; / If the matching route has RTFLLINFO set, then we can skip scrubbing the MAC only if the outgoing interface is not loopback and the...

check_icmp_dos

checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 Or use the script python checkicmpdos.py 127.0.0.1 This vulnerability allows an attacker, as long as they are...

CVE-2026-64705

CVE-2026-64705 — HFS xattr kernel heap overflow macOS Root-cause analysis and proof-of-concept for CVE-2026-64705, a buffer overflow in the HFS kernel extension fixed in macOS Sonoma 14.8.7 HT127117: HFS — Impact: An app may be able to cause unexpected system termination or write kernel memory. A...

CVE-2026-65349

CVE-2026-65349 — getattrlist OOB Write in vfsattrpackinternal Component: XNU VFS — vfsattrpackinternal getattrlist syscall Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds write to caller buffer Impact: Kernel heap corruption; from kernel conte...

CVE-2026-47513

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read from kernel heap memory. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges,...

CVE-2026-47513

The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer that allows a user to perform an out-of-bounds read from kernel heap memory. Successful exploitation could result in code execution , denial of service , escalation of privileges , information di...

FreeBSD -- Heap out-of-bounds access in semop(2)

Problem Description: When semop2 blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number embedded in the semaphore set's IPC identifier to detect whether the set was removed while the caller was asleep. This sequence number is...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Macos

CVE-2026-43682: an HFS+ B-tree kernel heap overflow in macOS...

Linux Distros Unpatched Vulnerability : CVE-2026-97563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSiz...

kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

A flaw was found in the Linux kernel's scsi: qla2xxx driver. A remote attacker, by sending a specially crafted Fibre Channel Protocol FCP response, could cause an integer underflow. This underflow leads to an out-of-bounds read when handling sense data, potentially disclosing sensitive memory...

CVE-2026-89846

A flaw was found in the Linux kernel's scsi: qla2xxx driver. A remote attacker, by sending a specially crafted Fibre Channel Protocol FCP response, could cause an integer underflow. This underflow leads to an out-of-bounds read when handling sense data, potentially disclosing sensitive memory...

CVE-2026-13087

Rejected reason: This CVE was reserved in error and duplicates CVE-2026-89530...

UBUNTU-CVE-2026-13087

A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svcrdmasendto.c. When a crafted RPC-over-RDMA client sends a large NFS READ request with an empty Write list and no Reply chunk, the server linearizes the entire...