CVE-2026-98247

A flaw was found in the Linux kernel's Bluetooth subsystem. When processing responses for supported codecs, the parser fails to verify that adequate buffer space remains before reading the vendor codec count. A malicious or malfunctioning Bluetooth controller can supply a truncated response packe...

patriot

Patriot Piccolo progetto di ricerca per il rilevamento di varie tecniche stealth in memoria. Scarica l'ultima release qui. La versione attuale supporta i seguenti rilevamenti: Strutture CONTEXT sospette che puntano a funzioni VirtualProtect. Prende di mira la ricerca di Austin Hudson Foliage e Ek...

CVE-2026-14854

The WooCommerce Bookings WordPress plugin, in versions prior to 3.11.0 , is vulnerable to an unauthenticated Denial of Service (DoS) . The flaw exists because the plugin fails to limit a user-supplied value used for memory allocation within an unauthenticated AJAX action . An unauthenticated atta...

CVE-2026-14854 WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

EUVD-2026-96746

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

CVE-2026-98310

A flaw was found in the Linux kernel's Intel Xe graphics driver. A local user can cause a Denial of Service DoS by triggering memory reclaim operations while the device is in a runtime-suspended state. This issue occurs because the driver's memory shrinker does not acquire a runtime power...

CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...

CVE-2025-14174-analysis

CVE-2025-14174 Analysis: ANGLE Metal Staging Buffer Out-of-Bounds Write Technical analysis and proof-of-concept for CVE-2025-14174 | ---|--- CVE| CVE-2025-14174 Severity| High Exploited ITW| Yes - targeted attacks on iOS 26 Affected| iOS Safari, macOS Chrome/Chromium/Electron not macOS Safari...

shed

Shed - Inspector de tiempo de ejecución de .NET Shed es una aplicación que permite inspeccionar el tiempo de ejecución .NET runtime de un programa para extraer información útil. Puede usarse para inspeccionar aplicaciones maliciosas y obtener una primera visión general de qué información se...

CVE-2026-98307

A flaw was found in the Linux kernel's ath11k wireless driver. This vulnerability can lead to a Denial of Service DoS through memory exhaustion. When recovering from a wireless firmware crash, the driver fails to free memory allocated for station statistics. An attacker or anomalous condition...

CVE-2025-5548

Memory Corruption Research & Exploitation Lab CVE-2025-5548 Advanced Vulnerability Analysis on Windows 11 Environment English Version Project Overview This repository documents a professional-grade cybersecurity research project focused on CVE-2025-5548 : a Stack-based Buffer Overflow vulnerabili...

CVE-2014-0160.

CVE-2014-0160 Lab setup using Heartbleed to leak memory of webapps This repo focuses on building a container to create an environment to easily exploit nginx using the Heartbleed technique, focusing on: Setting up environment using Docker Server setup diagram Demo steps Server diagram The...

CVE-2025

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Overview CVE-2025-43300 is a critical memory corruption vulnerability in Apple's image processing framework that affects iOS 18.6.1 and macOS systems. The vulnerability exists in the JPEG Lossless decompression code within...

meltdown-exploit

POC DE EXPLOTACIÓN DE MELTDOWN Las optimizaciones especulativas ejecutan código de manera no segura dejando rastros de datos en la microarquitectura, como en la caché. Lipp et al. 2018 publicaron su código el 2018-01-09 en https://github.com/IAIK/meltdown. Consulte su artículo para más detalles:...

cve-2025-5915

CVE-2025-5915 — libarchive RAR v4 heap over-read with on-device iOS 18.5 proof A controlled heap over-read / memory-disclosure in libarchive's RAR v4 filter path copyfromlzsswindow. This repo reproduces it end to end: local ASan, a from-scratch RAR v4 encoder that dials the leak size, and an...

lmg

Linux Memory Grabber Un script para volcar la memoria de Linux y crear perfiles de VolatilityTM. Hal Pomeranz [email protected], 2020-02-01 ¡AGRADECIMIENTOS! "Si he visto más lejos es por estar sobre los hombros de gigantes." Issac Newton Hay muchas personas que merecen agradecimiento por...

VBA-RunPE

VBA RunPE Description A simple yet effective implementation of the RunPE technique in VBA. This code can be used to run executables from the memory of Word or Excel. It is compatible with both 32 bits and 64 bits versions of Microsoft Office 2010 and above. More info here:...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUERIDO -m |region|referenced|ioc -p |PID OPCIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash

Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io Assigned CVE ID : CVE-2026-66731 Product: facil.io Affected versions: facil.io = 0.7.5 0.7.5, 0.7.6, master; introduced when the 0.8.x HTTP/1.1 parser was backported in 0.7.5 - not present in 0.6.x or 0.7.0–0.7.3...

CVE-2026-98298

A flaw was found in the Linux kernel's MMP Peripheral Direct Memory Access PDMA driver. When preparing multi-entry scatter-gather lists for Direct Memory Access DMA transfers, the driver incorrectly reads the buffer length from the initial list entry rather than the active entry being processed. ...