CVE-2026-93813

A flaw was found in the Linux kernel's Btrfs file system. The file system validation mechanism fails to properly verify file name lengths in file reference entries, leading to an out-of-bounds memory access when processing corrupted data. A local attacker can exploit this issue by mounting or...

CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white-hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, assigned CVE-2017-16995. This...

CVE-2026-93264

A flaw was found in the Linux kernel's Elastic Fabric Adapter EFA driver within the Remote Direct Memory Access RDMA subsystem. This vulnerability allows a local user to cause a denial of service DoS or memory corruption by registering a memory region with a specific page count. Due to an incorre...

CVE-2026-93791

A flaw was found in the Linux kernel's iwlwifi wireless driver. This vulnerability can lead to a Denial of Service DoS or kernel memory corruption due to an out-of-bounds memory access. When handling block acknowledgment notifications, the driver directly uses a traffic identifier TID provided by...

CVE-2026-93790

A flaw was found in the Linux kernel's iwlwifi wireless driver. An out-of-bounds memory access vulnerability exists in the Block Acknowledgement BA notification handling logic due to improper array indexing and missing bounds validation on traffic identifiers. A nearby attacker within wireless...

KslDump

KslDump - BMVD Bring the Microsoft Vulnerable Driver Important context I reported the issue to Microsoft on 7 March 2026. However, almost 20 days earlier, the game-hacking community had already reversed and publicly discussed it. From my side, I do not follow their projects and I was not aware of...

CVE-2023-20564

CVE-2023-20564 - AMD Ryzen Master Driver Physical Memory Access PoC Overview This repository contains a Proof of Concept PoC demonstrating the vulnerability CVE-2023-20564 in AMD Ryzen Master Driver. The vulnerability allows unprivileged users to read and write arbitrary physical memory, leading ...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control — any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...

CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Description The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be...

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE This exploit rebuilds and exploit the CVE-2019-16098 which is in driver Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. Instead of hardcoded base...

Centry

Centry WARNING: THIS IS EXPERIMENTAL SOFTWARE. IT IS LIKELY TO CONTAIN BUGS. Updates If you have already installed Centry, please run git pull to update to the latest version. The latest updates make it much more secure against replay attacks. Introduction Centry is a panic button intended to...

CVE-2022-22077

✅ CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...

SIOCtl

SIOCtl Simple IOCTL dispatcher This is a generic IOCTL "dispatcher". I made this to be used as a POC for CVE 2018-8060 and 2018-8061, but it can be used to any device, IOCTL and data, thought. Input data is a binary file, containing raw data to be used as input buffer in IO control. Output data i...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Arbitrary physical memory and I/O port read/write via ThrottleStop driver ThrottleStop is a small legitimate application used to monitor and correct CPU throttling. It has a driver that faciliates these tasks and it mostly doesn't have any sort of input validation...

kur

kur A code simply offers the ability to kernel-mode read / write memory from user-mode using vulnerable signed driver. It's simply utilizing MmCopyVirtualMemory, which is undocumented yet one of the most common API, in kernel mode so you can read / write any user-mode memory without having to wor...

cve-2024-0519-rca-research

CVE-2024-0519 — RCA Research Root cause analysis artifacts for CVE-2024-0519 V8 out-of-bounds memory access, Chrome 120, exploited in the wild. Fix : e0f2a195d87c9a06685121e0e783efd92d030df3 — Toon Verwaest, 2024-01-12 V8 version studied : 12.0.267.16 fbc4963bbff, ARM64 macOS Files...

CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC PoC exploit for HP Hardware Diagnostic's EtdSupp driver CVE-2023-32673/PSR-2022-0209 Building Open in Visual Studio 2019 Build in release Admire or don't Summary Pretty simple little driver with virtual memory r/w, no MmMapIoSpace, etc. Disclaimer Diet soda is disgusting...

CVE-2026-88360

A flaw was found in libvips, an image processing library. When handling specially crafted little-endian PFM Portable Float Map images, an attacker could trigger an unaligned memory access. This occurs if the image's text header length is not a multiple of four bytes, causing the loader to expose...