IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

cve-2024-21978-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of a running SEV-SNP guest. Tested on version 1.55.16 latest as of the time of writing. Root Cause The nvpaddr field of the SEVINITEX command can be use...

cve-2024-21980-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of an SEV-SNP guest after it's been decommissioned. Tested on version 1.55.16 latest as of time of writing. Root Cause The SEV firmware has a table call...

CVE-2021-23017-POC

CVE-2021-23017-POC A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. The issue only affects nginx if the "resolver"...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Buffer-Overflow Vulnerability Found on Squid Proxy. CVE-2025-54574 — Critical Heap Buffer Overflow in Squid Proxy This repository documents the discovery, analysis, and responsible disclosure process of CVE-2025-54574, a critical heap-based buffer overflow in Squid 6.4...

HeartbleedAttack

Heartbleed Attack: Java-Based Attack Demo Overview This repository features Heartbleed.java, a custom Java-based exploit designed to demonstrate the Heartbleed vulnerability CVE-2014-0160 by extracting sensitive data from a vulnerable server IP: 192.168.1.132 running Apache port 443 and Postfix...

MongoBleed-exploit

CVE-2025-14847: MongoBleed Laboratory logo.svg Table of Contents 1. Introduction 2. Vulnerability Details How it Works 3. Impact 4. Lab Architecture 5. Prerequisites 6. Installation and Usage 1. Start the Environment 2. Install Dependencies 3. Verify Lab Setup Optional 4. Run the Exploit 7...

DMA-ProcessDumper

DMA-ProcessDumper Dumps entire memory of target process on the user-mode using DMA with MemProcFS over a PCIe FPGA device Building Copy leechcore.h, vmmdll.h and vmm.lib from MemProcFS into the DMA-ProcessDumper directory Compile using Visual Studio Copy leechcore.dll, vmm.dll and FTD3XX.dll from...

CVE-2024-30804

ASUS Driver LPE PoC Physical Memory Abuse This is a PoC for Local Privilege Escalation LPE that exploits the AsInsHelp64.sys driver. It abuses a legitimate, signed ASUS driver to map physical memory and overwrite kernel tokens, eventually gaining NT AUTHORITY\SYSTEM privileges. 🎯 Vulnerability In...

CLEANSTART-2026-UM98418 Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes

CVE-2026-94440 affects multiple packages. Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. See references for individual vulnerability details...

CLEANSTART-2026-PZ04696 Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specify...

CVE-2026-97031 affects multiple packages. Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. See references for individual...

EUVD-2026-103192

Text::CSVXS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. fragment expands a row= or col= selector into an array with one element per selected index before it reads any data, and it does not clamp an explicit end colum...

EUVD-2026-103194

Text::CSVXS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array and returns a reference to it only when the parse succeeds. When the record has a syntax error, getline returns undef and never fre...

EUVD-2026-103202

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image,...

EUVD-2026-103204

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

EUVD-2026-103188

A flaw was found in GIMP. An attacker can cause a Denial of Service DoS or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive PAA texture file. Due to an integer overflow when calculating image dimensions during file...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to delayed enforcement of maximum property name length in the ReaderBasedJsonParser process. An attacker can exhaust system memory and cause a crash by submitting a JSON object with an excessively long property...

Denial of Service (DoS)

Overview com.fasterxml.jackson.core:jackson-core is a Core Jackson abstractions, basic JSON streaming API implementation Affected versions of this package are vulnerable to Denial of Service DoS due to delayed enforcement of maximum property name length in the ReaderBasedJsonParser process. An...

cve-2019-6207

CVE-2019-6207 $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct rtmsghdr rtm = stru...