CVE-2025-24990_POC

Windows Agere Modem Driver ltmdm64.sys. This driver is very old and is not loaded by default on my test machine, so I will exploit it in a BYOVD scenario. Interestingly, according to my research this driver has existed on Windows 7 and has at least one bug. here At that time, MSRC didn't take any...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

CVE-2026-23398

CVE-2026-23398 Linux Kernel icmptagvalidation NULL Pointer Dereference Remote DoS Description icmptagvalidation in net/ipv4/icmp.c dereferences inetprotosproto without a NULL check. A remote attacker can send a single crafted ICMP Fragmentation Needed packet with an unregistered inner protocol...

wasm2c-tableflip

wasm2c sandbox escape: guest module runs a shell command on the host Read the blog: trustsig.eu/blog wasmrtallocatefuncreftable in wasm2c/wasm-rt-impl-tableops.inc sets table-size from the module's declared element count and then ignores the result of calloc. When the allocation fails the table i...

s26-m1q-ghostlock-selinux

S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU 激活达成 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ 最终结果：uid=0 root + KernelSU 激活达成 exploit 后通过 root helper 验证 $...

CVE-2026-98399

A flaw was found in the Linux kernel. On s390 IBM Z systems booted without an Initial Program Load IPL parameter block, such as during direct kernel boot, the kernel does not verify the parameter block before dereferencing it during dump operations. A local privileged user could trigger this...

CVE-2026-98400

A flaw was found in the Linux kernel's s390 architecture. On systems booted without an Initial Program Load IPL parameter block, such as direct virtual machine boots, the kernel crash shutdown handler unconditionally dereferences an uninitialized pointer when preparing crash data. If a crash...

openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...

CVE-2026-45729

CVE-2026-45729 — ThorVG NULL Pointer Dereference via Malformed SVG Severity: CVSS 4.3 Medium — CWE-476 Advisory: GHSA-f863-8ghq-7h64 Fixed: ThorVG v1.0.5 Status: Patched / Disclosed Summary ThorVG's SVG parser dereferences a pointer that is never initialized when it encounters a truncated child...

CVE-2019-10207

CVE-2019-10207 PoC for CVE-2019-10207 linux kernel: bluetooth: hciuart: kernel NULL pointer dereference gcc CVE-2019-10207.c -o cve-2019-10207-poc -static test on 4.20.0 kernel compile CONFIG must be opened: CONFIGBTHCIUARTMRVL=y CONFIGBTMRVL=y...

practice-22-23

Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...

CVE-2019-9580

CVE-2019-9580 - StackStorm exploiting CORS null origin to gain RCE Prior to 2.10.3/2.9.3, if the origin of the request was unknown, we would return null. null can result in a successful request from an unknown origin in some clients. Allowing the possibility of XSS style attacks against the...

CVE-2025-47812

=========================================================== CVE-2025-47812 - Wing FTP Server Remote Code Execution RCE =========================================================== Author: blindma1den Date: July 2025 Exploit Type: Remote Code Execution Unauthenticated Target: Wing FTP Server 7.4.4...

exploit-CVE-2016-7434

CVE-2016-7434 ntpd DOS exploit Ntpd suffer from a null pointer reference which is possible to trigger to crash the application. According to NTP.org, "If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2022-50645: EDAC/i10nm: fix refcount leak in pcigetdevwrapper bsc1254633. CVE-2026-31663: xfrm: hold device only for the asynchronous decryption bsc1263133...

EUVD-2026-66590

In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in opteeffalendprotmem Sashiko locally reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer. Fix that by adding the missing check...

CVE-2026-79836

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

cve-2021-3449

CVE-2021-3449 OpenSSL This issue was reported to OpenSSL on 17th March 2021 by Nokia. The fix was developed by Peter Kästle and Samuel Sapalski from Nokia. Mitigation The only known fix is to update libssl1.1. Even though some applications use hardened TLS configurations by default that disable T...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ...

CVE-2026-79836

The HPE NonStop SQL/MX Run-Time Statistics component is vulnerable to memory corruption and a null pointer dereference. This flaw may allow an attacker to cause a process crash , Denial of Service (DoS) , or information disclosure . Affected versions include SQL/MX Run-Time Statistics T1117 - T11...