CitrixBleedCVE-2026-8452-2025-5777

CitrixBleed Exploit Tool - CVE-2025-5777 & CVE-2026-8452. Unauthenticated remote memory read from Citrix NetScaler ADC & Gateway. Steal admin session tokens, extract nsroot hashes, dump secrets, and bypass MFA. Python 3 exploit with full memory parsing. https://satoshi-box.com/pay/CSHeT8...

EXP-CVE-2017-75

EXP-CVE-2017-75 This Python script is designed to check for and exploit a specific vulnerability in NGINX servers referred to as CVE-2017-75. This was developed for a public vulnerability disclosure program, I recently submitted a report to. It uses a crafted Range header to potentially trigger a...

GhostKatz

GhostKatz Extract LSASS credentials directly from physical memory by abusing signed vulnerable drivers with physical memory read primitives via MmMapIoSpace, bypassing traditional user-mode detection capabilities. This tool was developed in collaboration between Julian Peña and Eric Esquivel. Thi...

CVE-2025-67246

CVE-2025-67246 Vulnerability Title :LuDaShi Incorrect Access Control Affected versions :Less than 6.1026.4505.112 Discovery time :December 2, 2025 Discoverer :ZhouRui Analysis Report : LuDaShi is a well-known free system utility software that provides free hardware authentication, computer mobile...

CVE-2022-3699

CVE-2022-3699 Incorrect access control for the Lenovo Diagnostics Driver allows a low-privileged user the ability to issue device IOCTLs to perform arbitrary physical/virtual memory read/write. Thank you to ch3rn0byl for helping with this and I totally 100% ripped two of his functions. Explanatio...

libget_user_exploit

This library read in kernel memory by CVE-2013-6282 exploit...

libmsm_vfe_read_exploit

Read kernel mermory with CVE-2014-4321...

AFD

AFD CVE-2022-24494 The vulnerability is an arbitrary memory read. The root cause is a lack of validation in a memory address suplied from user-land that is used in a memcpy operation in order to copy data from this memory address into the pool memory. The lack of check is in the addres...

Meltdown

Meltdown PoC for Meltdown in linux CVE-2017-5754 Useage cd meltdown make ./meltdown address size Example Refer http://zzado.tistory.com/category/Report...

AmdRyzenMasterCheat

ECPRO-LAN Anti-Cheats: FACEIT, ESEA w/ custom version Early 2019 - late 2020. R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ Requirements: Windows 10 Enterprise 1607 LTSB with all updates AMD Ryzen CPU Motherboard B350-B450 B550 client is bugged Logitech GHUB installed for mouse input Older gen...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

MongoBleed-exploit

CVE-2025-14847: MongoBleed Laboratory logo.svg Table of Contents 1. Introduction 2. Vulnerability Details How it Works 3. Impact 4. Lab Architecture 5. Prerequisites 6. Installation and Usage 1. Start the Environment 2. Install Dependencies 3. Verify Lab Setup Optional 4. Run the Exploit 7...

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

CVE-2020-1206-POC

CVE-2020-1206 Uninitialized Kernel Memory Read POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes POC to check for CVE-2020-1206 / "SMBleed" Expected outcome: Local file containing target computer kernel memory. Intended only for educational and testing in corporate...

EUVD-2026-91136

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2021-28476

CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2025-65264

CVE-2025-65264 Description In CPU‑Z 2.17 and earlier and other products that use CPU-Z driver with version 1.0.6.1 and earlier, the driver e.g. cpuz161.sys dereferenced a value from a user‑supplied address and wrote it to the system buffer supplied by the caller. An attacker could read arbitrary...