lfi

Lightweight Fault Isolation LFI Welcome to the top-level repository for the Lightweight Fault Isolation LFI project. What is LFI? LFI is a system for sandboxing native code. Like WebAssembly and Native Client, LFI isolates sandboxed code in-process i.e., in the same address space as a host...

rex

| | \ / / | | | | | | | | \ / | | \ / / / \ ' / | |/ | ' / | | | || / | | \ \ | | | | \ \ || \//\ |//\\|| ||/|/|| ||/ Rex Kernel Extensions Table of Contents What is Rex Example program Build and run Documentations Why Rex License What is Rex Rex is a safe and usable kernel extension...

zyrox

Zyrox LLVM Obfuscator llvm compile and link-time plugin for obfuscating native code Why why not ¯\ツ/¯ One of my biggest projects, where I learned a lot about LLVM internals, binary formats, assembly and obfuscation techniques. I believe that learning through building is the best way to learn, thu...

CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

Capsulith

Capsulith Run preserved native code. Reopen its initialized state. Capsulith packages selected ARM64 functions, their calling contracts and owned memory for Node or the browser. Keep the original instructions and resume an initialized object in a fresh worker, without the original application. A...

capacitor-flaw-cve-2026-103922

Capacitor Mobile Framework Flaw CVE-2026-103922 A high-severity security flaw, tracked as CVE-2026-103922, has been identified in Capacitor, the popular cross-platform mobile application framework by Ionic. This vulnerability exposes the native bridge mechanism, potentially allowing malicious web...

CVE-2026-119756

Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages over UDP port 4447 that cause the...

CVE-2026-119756 Tasmota 16.0.0 Heap Out-of-Bounds Write via Device Groups UDP

Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages over UDP port 4447 that cause the...

EUVD-2026-120125

Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages over UDP port 4447 that cause the...

CVE-2026-119756

Tasmota versions through 16.0.0 are vulnerable to a heap out-of-bounds write in the SendReceiveDeviceGroupMessage() function. An unauthenticated attacker on the local network can send crafted Device Groups messages over UDP port 4447 , causing the log_remaining counter to become negative. This re...

CVE-2026-119756 Tasmota 16.0.0 Heap Out-of-Bounds Write via Device Groups UDP

Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages over UDP port 4447 that cause the...

CVE-2026-119756 Tasmota 16.0.0 Heap Out-of-Bounds Write via Device Groups UDP

Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages over UDP port 4447 that cause the...

PT-2026-140927

Name of the Vulnerable Software and Affected Versions Tasmota versions prior to 16.0.0 Description A heap out-of-bounds write exists in the SendReceiveDeviceGroupMessage function. Unauthenticated attackers on the local network can corrupt heap memory by sending crafted Device Groups messages over...

CVE-2026-119756: arendst Tasmota: Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in…

Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages over UDP port 4447 that cause the...

CVE-2026-121997

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

UBUNTU-CVE-2026-121997

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

AZL-113152 CVE-2026-121997 affecting package gdb 13.2-11

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

AZL-113125 CVE-2026-121997 affecting package crash 9.0.0-3

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

CVE-2026-121997

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...