pe-bear

PE-bear PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files...

CVE-2021-38304-PoC

CVE-2021-38304 Prueba de Concepto Resumen Este repositorio contiene una prueba de concepto para una vulnerabilidad de seguridad crítica en versiones antiguas del controlador nipalk.sys de National Instruments. La vulnerabilidad permite la ejecución arbitraria de código y la divulgación de memoria...

ComfyEngine

ComfyEngine Qt-based memory scanner / watchlist playground inspired by Cheat Engine but built natively for Linux and tuned for my workflow: clean docks, pointer graphs, fast patching, and zero fear of losing context when you bounce between scanner, scripts, and notes. ComfyEngine gives you a clea...

CVE-2022-37969

CVE-2022-37969 Windows 本地权限提升 PoC 作者：Ricardo Narvaja 和 Daniel Kazimirow Solid 仅用于演示目的。完整的漏洞利用适用于易受攻击的 Windows 11 21H2 系统。 基于先前 Zscaler 发布的信息 的功能性 PoC。 查看相关文章 理解 CVE-2022-37969 Windows 通用日志文件系统驱动程序本地权限提升。 用法 理解 CVE-2022-37969 Windows 通用日志文件系统驱动程序本地权限提升。 利用过程详解： 创建初始的 BLF 日志文件 创建多个随机的 BLF 日志文件...

CVE-2021-28476

CVE-2021-28476: Microsoft Hyper-V：vmswitch 中的多个漏洞 在处理 set OID 请求时，WPP 代码中存在多个 bug，其中一个允许解引用（读访问）攻击者控制的指针，其余的导致越界读访问。此仓库包含用于触发已识别问题的概念验证代码。 可在 https://labs.bluefrostsecurity.de/advisories/bfs-sa-2021-001/ 找到问题的完整技术描述。...

CVE-2024-36424

CVE-2024-36424 Esta vulnerabilidad fue descubierta y divulgada por M. Akil Gündoğan del Secunnix Vulnerability Research Team. Este repositorio contendrá la prueba de concepto y los avisos. Detalles: Producto: K7 Ultimate Security Versiones afectadas: v17.0.2019 CVE ID: CVE-2024-36424 Sistema...

CVE-2023-20938

CVE-2023-20938 English 漏洞分析 1. client A与client B通过上下文管理器servicemanager建立Binder连接 2. A创建node 0xbeefnode = bindernewnodeproc, fp;，B通过ref-targetnode引用node 0xbeef 3. B先正确处理targetnode 0xbeef，将引用了targetnode 0xbeef的事物bindertransaction存入A的事物队列binderenqueueworkilocked&t-work, &proc-todo;，使A可以再次引用被释放的悬挂指针 ...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: Linux kernel: libceph null pointer dereference leads to denial of service

A flaw was found in libceph, a component of the Linux kernel. When processing a malformed CRUSH map, if a parent bucket's name exists but its type is missing, a null pointer dereference can occur. This issue can lead to a system crash, resulting in a Denial of Service DoS...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref 是 CVE-2017-2388 的概念验证漏洞利用程序，这是一个 IOFireWireUserClient 中的空指针解引用漏洞，已在 macOS Sierra 10.12.4 中修复。该漏洞可被触发，导致带有 FireWire 端口的设备发生拒绝服务。 CVE-2017-2388 函数 IOFireWireUserClient::setAsyncRefIsochChannelForceStop 在将参数 inAsyncRef 作为源调用 bcopy 之前，未检查...

CVE-2015-8543_for_SLE12SP1

root@kitploit: $cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" root@kitploit: $id uid=1000jeremysp1 gid=100users groups=100users root@kitploit: $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i...

CVE-2026-19888

A flaw was found in PgBouncer. Missing validation of a mandatory attribute in the SCRAM client-final-message parser allows an unauthenticated remote attacker to crash the process. By sending a malformed message, the parser can report success while a required value remains unset, leading to a NULL...

php_hack

Esta herramienta explota una vulnerabilidad llamada CVE-2019-11043, una instancia de aritmética de punteros insegura, para obtener acceso a servidores PHP mal configurados. Se puede descargar aquí necesitarás ejecutarlo desde la línea de comandos Uso: phphack target IP target port...

Tai-e

Tai-e ✨新闻 发布 v0.5.4： Tai-e 附带了一个新前端，能将 Java 程序更快、更可靠地转换为 Tai-e IR。 通过与指针分析集成的 PacDroid 驱动插件，支持 Android 应用分析。 通过 Spring 分析插件，支持 Spring DI 和 WEC 分析。 我们的论文《Two Approaches to Fast Bytecode Frontend for Static Analysis》已被 OOPSLA'25 录用。该论文介绍了 Tai-e 的字节码新前端，比现有前端更快、更可靠。 我们的论文《Pointer Analysis for...

CVE-2017-11176

CVE-2017-11176 CVE-2017-11176 的代码执行概念验证。 漏洞 Linux 内核（直至 4.11.9）中的 mqnotify 函数在进入重试逻辑时未将 sock 指针设置为 NULL。在用户空间关闭 Netlink 套接字期间，攻击者可利用此漏洞导致拒绝服务（释放后使用）或可能造成其他未指明的影响。 参考 https://blog.lexfo.fr/cve-2017-11176-linux-kernel-exploitation-part1.html...

CVE-2026-19888

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ...

EUVD-2026-85365

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

CVE-2019-10207

CVE-2019-10207 CVE-2019-10207 的 PoC：Linux 内核蓝牙 hciuart 驱动空指针解引用 root@kitploit: gcc CVE-2019-10207.c -o cve-2019-10207-poc -static 在 4.20.0 上测试 内核编译需要开启以下 CONFIG 选项： root@kitploit: CONFIGBTHCIUARTMRVL=y CONFIGBTMRVL=y...