CVE-2026-93588

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When the coder reaches a memory resource limit at a specific point during processing, the failed allocation is not handled and a NULL pointer is dereferenced, which can lead to a denial of servi...

CVE-2023-3338-DECPwn

DECPwn 使用我的DECnet漏洞和空页映射启用，练习不同的Linux内核利用技术。 场景 全部禁用 ：qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" 代码执行被重定向到用户态的output函数，该函数调用commitcredspreparekernelcred0。 系统调用挂钩 将 syscalltable 中的 mkdir 系统调用处理程序地址替换为一个类似于场景1的函数。 启用SMEP和KPTI ：qemu-system-x8664 -append "nosmap nokaslr"...

PHP_8.1.x_Exploit

🚀 PHP CVE 自动驾驶仪 自动检测和利用关键 PHP 漏洞 CVE-2024-4577 绕过, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh 是一个单文件、零配置 的安全评估工具，能够自动发现易受攻击的 PHP 端点，并利用影响 PHP 8.1.34 之前版本 （2024 年 12 月发布）的四个高危 CVE 。它无需手工构建载荷 ——只需提供一个 URL，脚本会自动完成从爬取到远程代码执行的全部工作。完全自动驾驶模式 ——无需用户提示即可自动检测和利用。 特性 完全自主的自动驾驶模式 – 给定一...

CVE-2026-93312

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to...

CVE-2026-93312

Freedesktop Poppler version 26.07.0 contains a null pointer dereference in the function JBIG2Stream::rewind (file poppler/JBIG2Stream.cc), triggered when processing a crafted JBIG2 stream. The vulnerability is exploitable remotely with user interaction required (e.g., opening a malicious PDF). Im...

EUVD-2026-82613

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

CVE-2024-55511

CVE-2024-55511 此存储库已归档并移至这里 Macrium Reflect 8.1.8017之前版本中存在空指针解引用漏洞，允许本地攻击者通过执行特制可执行文件导致系统崩溃或提升权限。 我目前正在为此漏洞编写一篇分析文章。该文章将尽量适合初学者，以引导新手进入Windows内核利用领域。敬请期待！...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS EN ANDROID NULL PTR DEREF, OOM SOLO POR LAS RISAS...

CVE-2024-36424

CVE-2024-36424 Esta vulnerabilidad fue descubierta y divulgada por M. Akil Gündoğan del Secunnix Vulnerability Research Team. Este repositorio contendrá la prueba de concepto y los avisos. Detalles: Producto: K7 Ultimate Security Versiones afectadas: v17.0.2019 CVE ID: CVE-2024-36424 Sistema...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

CVE-2015-8543_for_SLE12SP1

root@kitploit: $cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" root@kitploit: $id uid=1000jeremysp1 gid=100users groups=100users root@kitploit: $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i...

DEBIAN-CVE-2026-90184

In the Linux kernel, the following vulnerability has been resolved: nullblk: serialize configfs attribute updates with device setup The attribute store methods generated with NULLBDEVICEATTR refuse to change the configuration of a live device by testing NULLBDEVFLCONFIGURED, but that flag is only...

DEBIAN-CVE-2026-90115

In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in xskrcv In the xskrcv multi-buffer path, xskbuffalloc is called in a loop without checking its return value. xskbuffcanalloc only counts fill queue entries without validating their addresses, s...

DEBIAN-CVE-2026-90066

In the Linux kernel, the following vulnerability has been resolved: samples/ftrace: Fix kthreadstop on ERRPTR in ftrace-direct-multi-modify ftracedirectmultiinit assigns kthreadrun's return value to simpletsk without an ISERR check. When kthreadrun fails it returns ERRPTR-ENOMEM, but init still...

CVE-2022-34683

CVE-2022-34683 El controlador de pantalla GPU NVIDIA para Windows contiene una vulnerabilidad en el manejador de la capa de modo kernel nvlddmkm.sys para DxgkDdiEscape, donde ocurre una desreferencia de puntero nulo, lo que puede provocar una denegación de servicio. autenticación| complejidad|...

CVE-2026-76781

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...

EUVD-2026-82288

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix NPD issue on partial unmap of an evicted BO This commit fixes the NULL pointer dereference issue that would have happened on the split of GPU mapping due to partial unmap of an evicted BO. There is a logic to...

CVE-2026-93180

CVE-2026-93180 affects the Linux kernel's drm/panthor GPU driver. A NULL pointer dereference occurs when a GPU memory mapping is split during a partial unmap of an evicted Buffer Object (BO) . The root cause is that the logic handling partial unmap of huge pages was not fully skipped for the VMA ...

CVE-2026-93139

CVE-2026-93139 affects the Linux kernel's amdgpu driver , specifically the MES (Micro-Engine Scheduler) component. The root cause is a loop in the hung_queue_db_array that iterated only AMDGPU_MAX_MES_PIPES times, leaving entries uninitialized for multi-XCC GPUs. This results in null pointer dere...