cve-2018-4233

CVE-2018-4233 Exploit for CVE-2018-4233, a bug in the JIT compiler of WebKit. Tested on Safari 11.0.3 on macOS 10.13.3. For more details see https://saelo.github.io/presentations/blackhatus18attackingclientsidejitcompilers.pdf The exploit gains arbitrary memory read/write by constructing the addr...

Meltdown

Meltdown PoC for Meltdown in linux CVE-2017-5754 Useage cd meltdown make ./meltdown address size Example Refer http://zzado.tistory.com/category/Report...

CVE-2020-8277

CVE-2020-8277 Solo con fines educativos. Ejecución rápida clona este repositorio $ git clone https://github.com/masahiro331/CVE-2020-8277 ejecuta bind $ docker build -t bind-local ./bind Necesita fallback TCP $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind usa la versión " v15.2.1" S...

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

CitrixBleedCVE-2026-8452-2025-5777

CitrixBleed Exploit Tool - CVE-2025-5777 & CVE-2026-8452. Unauthenticated remote memory read from Citrix NetScaler ADC & Gateway. Steal admin session tokens, extract nsroot hashes, dump secrets, and bypass MFA. Python 3 exploit with full memory parsing. https://satoshi-box.com/pay/CSHeT8...

EXP-CVE-2017-75

EXP-CVE-2017-75 Este script de Python está diseñado para verificar y explotar una vulnerabilidad específica en servidores NGINX conocida como CVE-2017-75. Fue desarrollado para un programa público de divulgación de vulnerabilidades, al cual recientemente envié un informe. Utiliza un encabezado...

CVE-2025-67246

CVE-2025-67246 Vulnerability Title :LuDaShi Incorrect Access Control Affected versions :Less than 6.1026.4505.112 Discovery time :December 2, 2025 Discoverer :ZhouRui Analysis Report : LuDaShi is a well-known free system utility software that provides free hardware authentication, computer mobile...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

MongoBleed-exploit

CVE-2025-14847: Laboratorio MongoBleed logo.svg Tabla de Contenidos 1. Introducción 2. Detalles de la Vulnerabilidad Cómo Funciona 3. Impacto 4. Arquitectura del Laboratorio 5. Prerrequisitos 6. Instalación y Uso 1. Iniciar el Entorno 2. Instalar Dependencias 3. Verificar Configuración del...

CVE-2020-1206-POC

CVE-2020-1206 POC de Lectura de Memoria del Kernel No Inicializada c 2020 ZecOps, Inc. - https://www.zecops.com - Encuentra los Errores de los Atacantes POC para verificar CVE-2020-1206 / "SMBleed" Resultado esperado: Archivo local que contiene la memoria del kernel de la computadora objetivo...

EUVD-2026-91136

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2021-28476

CVE-2021-28476: una vulnerabilidad de ejecución remota de código de Microsoft Hyper-V de invitado a anfitrión en vmswitch.sys. Esta es una prueba de concepto para CVE-2021-28476 "Vulnerabilidad de ejecución remota de código en Hyper-V", una lectura arbitraria de memoria en vmswitch.sys proveedor ...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2025-65264

CVE-2025-65264 Descripción En CPU‑Z 2.17 y anteriores y otros productos que usan el controlador CPU-Z con versión 1.0.6.1 y anteriores, el controlador ej. cpuz161.sys desreferenció un valor desde una dirección proporcionada por el usuario y lo escribió en el búfer del sistema suministrado por la...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

A vulnerability exists in certain ASUS motherboards due to improper initialization . This flaw allows a physically proximate user to read or write arbitrary memory by inserting a specially crafted device . The vulnerability has a high severity score of 7.0 (CVSS 4.0) and requires physical access....