CVE-2020-8277

CVE-2020-8277 Solo con fines educativos. Ejecución rápida root@kitploit: clona este repositorio $ git clone https://github.com/masahiro331/CVE-2020-8277 ejecuta bind $ docker build -t bind-local ./bind Necesita fallback TCP $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind usa la versi...

CitrixBleedCVE-2026-8452-2025-5777

CitrixBleed Exploit Tool - CVE-2025-5777 & CVE-2026-8452. Unauthenticated remote memory read from Citrix NetScaler ADC & Gateway. Steal admin session tokens, extract nsroot hashes, dump secrets, and bypass MFA. Python 3 exploit with full memory parsing. https://satoshi-box.com/pay/CSHeT8...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090433 advisory. In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exifreaddata function, it is possible for malicious data to...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003828 advisory. A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and...

EXP-CVE-2017-75

EXP-CVE-2017-75 Este script de Python está diseñado para verificar y explotar una vulnerabilidad específica en servidores NGINX conocida como CVE-2017-75. Fue desarrollado para un programa público de divulgación de vulnerabilidades, al cual recientemente envié un informe. Utiliza un encabezado...

CVE-2025-67246

CVE-2025-67246 Vulnerability Title :LuDaShi Incorrect Access Control Affected versions :Less than 6.1026.4505.112 Discovery time :December 2, 2025 Discoverer :ZhouRui Analysis Report : LuDaShi is a well-known free system utility software that provides free hardware authentication, computer mobile...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

MongoBleed-exploit

CVE-2025-14847: Laboratorio MongoBleed logo.svg Tabla de Contenidos 1. Introducción 2. Detalles de la Vulnerabilidad Cómo Funciona 3. Impacto 4. Arquitectura del Laboratorio 5. Prerrequisitos 6. Instalación y Uso 1. Iniciar el Entorno 2. Instalar Dependencias 3. Verificar Configuración del...

CVE-2026-78546 Out-of-Bounds Read

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

CVE-2020-1206-POC

CVE-2020-1206 POC de Lectura de Memoria del Kernel No Inicializada c 2020 ZecOps, Inc. - https://www.zecops.com - Encuentra los Errores de los Atacantes POC para verificar CVE-2020-1206 / "SMBleed" Resultado esperado: Archivo local que contiene la memoria del kernel de la computadora objetivo...

CVE-2021-28476

CVE-2021-28476: una vulnerabilidad de ejecución remota de código de Microsoft Hyper-V de invitado a anfitrión en vmswitch.sys. Esta es una prueba de concepto para CVE-2021-28476 "Vulnerabilidad de ejecución remota de código en Hyper-V", una lectura arbitraria de memoria en vmswitch.sys proveedor ...

CVE-2026-79522

An out-of-bounds read in the gfdmgetchunkdata function src/utils/...

CVE-2025-65264

CVE-2025-65264 Description In CPU‑Z 2.17 and earlier and other products that use CPU-Z driver with version 1.0.6.1 and earlier, the driver e.g. cpuz161.sys dereferenced a value from a user‑supplied address and wrote it to the system buffer supplied by the caller. An attacker could read arbitrary...

CVE-2026-87640

Out of bounds read in WebView in Google Chrome on on Android prior to...

CVE-2026-87795

A flaw was found in zstd-jni. This vulnerability occurs due to insufficient validation of offset and length parameters within the ZstdDictCompress constructor. An attacker can exploit this by providing untrusted values, leading to an out-of-bounds memory read. This can result in the disclosure of...

EUVD-2026-74791

zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashe...

CVE-2026-81646

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-87630

A flaw was found in WebRTC in Chromium-browser. A remote attacker could exploit an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the browser's sandbox environment...

CVE-2026-87576

A flaw was found in the GPU component of Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit an uninitialized resource vulnerability by crafting a malicious HTML page. This could allow the attacker to read memory outside of the sandbox,...

DEBIAN-CVE-2026-87657

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...