KslDump

KslDump - BMVD Bring the Microsoft Vulnerable Driver Important context I reported the issue to Microsoft on 7 March 2026. However, almost 20 days earlier, the game-hacking community had already reversed and publicly discussed it. From my side, I do not follow their projects and I was not aware of...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

CVE-2026-125229

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

EUVD-2026-120179

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

CVE-2026-125229

FFmpeg versions through 9.0.2 are vulnerable to an out-of-bounds memory access vulnerability in the encode_frame() function of libavcodec/huffyuvenc.c. The root cause is that encode_init() fails to validate minimum frame dimensions for the median predictor. An attacker can provide a very small vi...

CVE-2026-125229 FFmpeg through 9.0.2 Out-of-Bounds Memory Access in Huffyuv/FFVHUFF Median Predictor

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

CVE-2026-125229 FFmpeg through 9.0.2 Out-of-Bounds Memory Access in Huffyuv/FFVHUFF Median Predictor

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

dpdk: dpdk: Double offset bug in vhost log mapping calculation

A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access...

PT-2026-141057

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode frame function of libavcodec/huffyuvenc.c, because encode init never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall...

CVE-2026-125229: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode_frame() function of…

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Arbitrary physical memory and I/O port read/write via ThrottleStop driver ThrottleStop is a small legitimate application used to monitor and correct CPU throttling. It has a driver that faciliates these tasks and it mostly doesn't have any sort of input validation...

CVE-2021-3656-Demo

CVE-2021-3656: This issue is caused by missing validation of the the virtext VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS Virtual VMLOAD/VMSAVE for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and...

cve-2026-29923

CVE-2026-29923 — pstrip64.sys Local Privilege Escalation A minimal proof-of-concept for CVE-2026-29923, a vulnerability in the pstrip64.sys kernel driver EnTech Taiwan PowerStrip ≤ 3.90.736 that allows an unprivileged user-mode process to escalate to NT AUTHORITY\SYSTEM. The Bug pstrip64.sys...

CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Description The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be...

cormem-read-poc

DISCLAIMER : This project is for educational and security research purposes only. Use only on systems you own or have explicit permission to test. Unauthorized use may be illegal in your jurisdiction. cordrvexploit — CVE-2026-38194 Vulnerability This tool demonstrates CVE-2026-38194, a...

CVE-2019-16098

CVE-2019-16098 The driver in Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control — any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...

SIOCtl

SIOCtl Simple IOCTL dispatcher This is a generic IOCTL "dispatcher". I made this to be used as a POC for CVE 2018-8060 and 2018-8061, but it can be used to any device, IOCTL and data, thought. Input data is a binary file, containing raw data to be used as input buffer in IO control. Output data i...

CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white-hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, assigned CVE-2017-16995. This...

CVE-2022-22077

✅ CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...