CVE-2022-1015

CVE-2022-1015 A write-up and Local Privilege Escalation Proof-of-Concept of an OOB read and write vulnerability in the Linux Kernel. You can find the write-up of this vulnerability on my blog and you can find my introduction to nftables here as well. An Important note The exploit provided in this...

Elysium-Vanguard-Sentinel-Audit

SENTINEL-ROOT-AUDIT: Honor Magic V2 Hypervisor Detection Suite ➲ Project Overview SENTINEL-ROOT-AUDIT is a professional-grade security suite designed to audit kernel integrity and detect hypervisor-level interventions on the Honor Magic V2 SM8550. While the core vulnerability CVE-2025-38352 allow...

CVE-2021-30632

From: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 The analysis of this bug can be found here. This is a Chrome bug that is reported by an anonymous researcher and was believed to be exploited in the wild. The exploit here is tested on v8 version...

weightBufs

WeightBufs: WeightBufs is a kernel r/w exploit for all Apple devices with Neural Engine support. Bugs and Exploit by @simo36, you can read my presentation slides at POC for more details about the vulnerabilities and the exploitation techniques. The exploit doesn't rely on any hardcoded address or...

CVE-2024-5274

CVE-2024-5274 authors: @mistymntncop, @buptsb Shoutout to @buptsb for his major contribution of discovering both the DCHECK bytecode mismatch POC and then discovering how to elevate that primitive to more powerful OOB read/write primitives. Without him this exploit would not be possible :- based ...

nftables-oob-read-write-exploit-CVE-2023-35001-

nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage Build $ make Run $ ./exploit This produces a lpe.zip file...

CVE-2017-13672

CVE-2017-13672 POCs for CVE-2017-13672 OOB read in VGA Cirrus QEMU driver, causing DoS...

CVE-2026-84118-who-labeled-the-crit-as-a-high

CVE-2026-84118 — SpiderMonkey GC use-after-free Bug 2057457 This is one of those where Mozilla labeled a Critical as a High. So someone might want to go have Firefox update the original bug hunters payment if that's the case. THE TLDR: You can do an OOB R primitive on a controlled pointer and the...

cve-2023-21987-poc

cve-2023-21987-poc Oracle VirtualBox VGA OOB-Read Vulnerability This Proof of Concept PoC is designed for a Linux guest OS running on a Windows host OS. The purpose of this PoC is to demonstrate the ability to leak addresses of VirtualBox components. You may need to adjust the pointer values with...

CVE-2026-32945

CVE-2026-32945 PJSIP DNS Compression Pointer Heap OOB Read Remote DoS Description getnamelen and getname in pjlib-util/src/pjlib-util/dns.c read a 2-byte DNS compression pointer via pjmemcpy&offset, p, 2 without checking that both bytes lie within the packet buffer. When a 0xC0 byte compression...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146151 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146328 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...

CVE-2026-7482-PoC

CVE-2026-7482: Ollama Heap Out-of-Bounds Read 1-Day PoC This repository contains a 1-day Proof of Concept PoC exploitation chain for CVE-2026-7482 , an unauthenticated Out-of-Bounds OOB Read vulnerability in Ollama's GGUF model loader versions prior to 0.17.1. Note: This is a 1-day research...

BIT-PILLOW-2026-112404 Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently,...

Fedora 46 : libsidplayfp (2026-6ebd8db1af)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6ebd8db1af advisory. Automatic update for libsidplayfp-3.1.2-1.fc46. Changelog Mon Oct 26 2026 Karel Voln - 3.1.2-1 - Update to 3.1.2 rhbz2560385 - Fixes CVE-2026-111148 - possib...

ZDI-CAN-33774

The Bug · Check · Exploit · Detection · Impact · Write-up ---...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142471 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142473 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142541)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142541 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gsskrb5unwrapv2 against short tokens gsskrb5unwrapv2 reads the EC and RRC header...