libmsm_vfe_read_exploit

Read kernel mermory with CVE-2014-4321...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

CVE-2021-28476

CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...

GhostKatz

GhostKatz Extract LSASS credentials directly from physical memory by abusing signed vulnerable drivers with physical memory read primitives via MmMapIoSpace, bypassing traditional user-mode detection capabilities. This tool was developed in collaboration between Julian Peña and Eric Esquivel. Thi...

AmdRyzenMasterCheat

ECPRO-LAN Anti-Cheats: FACEIT, ESEA w/ custom version Early 2019 - late 2020. R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ Requirements: Windows 10 Enterprise 1607 LTSB with all updates AMD Ryzen CPU Motherboard B350-B450 B550 client is bugged Logitech GHUB installed for mouse input Older gen...

CVE-2026-98839

A flaw was found in the Linux kernel's virtual terminal selection subsystem. When pasting console selections, a race condition can occur if another process concurrently replaces the selection buffer with shorter content while the operation is temporarily paused. This situation causes an integer...

cve-2018-4233

CVE-2018-4233 Exploit for CVE-2018-4233, a bug in the JIT compiler of WebKit. Tested on Safari 11.0.3 on macOS 10.13.3. For more details see https://saelo.github.io/presentations/blackhatus18attackingclientsidejitcompilers.pdf The exploit gains arbitrary memory read/write by constructing the addr...

CVE-2026-98838

A flaw was found in the Linux kernel's virtual terminal subsystem. When handling screen updates for background consoles, the kernel fails to properly verify that a console is active before redrawing it with modified font dimensions. A local attacker can exploit this issue by altering font setting...

CVE-2026-56129

Description Arbitrary physical memory read/write using Toshiba qiomem.sys from ring 3 only works upto 4GB physical addresses. Driver is distributed via Microsoft Update Catalog. Other variants. Not listed on Microsoft Vulnerable Driver List, no previous CVE alloted. first run acpi.exe to create t...

Meltdown

Meltdown PoC for Meltdown in linux CVE-2017-5754 Useage cd meltdown make ./meltdown address size Example Refer http://zzado.tistory.com/category/Report...

libget_user_exploit

This library read in kernel memory by CVE-2013-6282 exploit...

AFD

AFD CVE-2022-24494 The vulnerability is an arbitrary memory read. The root cause is a lack of validation in a memory address suplied from user-land that is used in a memcpy operation in order to copy data from this memory address into the pool memory. The lack of check is in the addres...

CVE-2026-98810

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can cause a Denial of Service DoS or potentially disclose sensitive memory by transmitting specially crafted network packets. This issue occurs because the kernel checks the total packet length instead of verifyi...

CVE-2026-98807

A flaw was found in the Linux kernel's Mellanox ConnectX mlx5 network driver. It allows a privileged local user to cause a Denial of Service DoS via an out-of-bounds memory read. When processing Link Aggregation LAG events, the driver incorrectly applies bonding-specific operations to smaller...

CVE-2024-2887

CVE-2024-2887 This is a short writeup for the CVE-2024-2887, which I used to claim V8CTF M123. When define more types than kV8MaxWasmTypes, which can be achieved by padding more types in RecGroup, the types index can be more than 20bits and then overflowed. Then two types can be considered same a...

CVE-2026-98797

A flaw was found in the Linux kernel. A local user with network administration privileges in a network namespace can cause a Denial of Service DoS by triggering an out-of-bounds memory read. When redirecting packets between network interfaces with differing numbers of transmit queues, the kernel...

CVE-2026-98938

The Linux kernel contains a vulnerability within the Rust implementation of IRQ handling. Specifically, because Devres::new() returns a Result by value (introduced in commit ba268514ea14), the registration.inner field remains uninitialized when request_irq() is called. This allows the IRQ callbac...

CVE-2022-3699

CVE-2022-3699 Proof of Concept exploit for CVE-2022-3699 Exploit tested on Windows 10 22H2 build 19045.4651 and build 19045.3803 Vulnerability deals with allowing unprivileged users to access functionality that lets you read and write from physical memory from the instance of the kernel, however...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, with vulnerability ID CVE-2017-16995...