CVE-2009-2692

CVE-2009-2692 Linux 空指针解引用 这只是 https://www.exploit-db.com/exploits/9545/ 上代码的编译二进制文件 为教育目的编译 它在 CentOS 4.8 下编译...

CVE-2022-37969

CVE-2022-37969 Windows 本地权限提升 PoC 作者：Ricardo Narvaja 和 Daniel Kazimirow Solid 仅用于演示目的。完整的漏洞利用适用于易受攻击的 Windows 11 21H2 系统。 基于先前 Zscaler 发布的信息 的功能性 PoC。 查看相关文章 理解 CVE-2022-37969 Windows 通用日志文件系统驱动程序本地权限提升。 用法 理解 CVE-2022-37969 Windows 通用日志文件系统驱动程序本地权限提升。 利用过程详解： 创建初始的 BLF 日志文件 创建多个随机的 BLF 日志文件...

CVE-2026-82821

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – Rust 不安全 Web 服务器中的释放后使用 程序代码（Rust） root@kitploit: // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffer data: Vec, impl SharedBuffer fn new -...

CVE-2026-82821 FLVMeta AMF Object Parsing amf.c amf_object_get null pointer dereference

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...

CVE-2026-82821

CVE-2026-82821 is a null pointer dereference in FLVMeta up to 1.2.2 , located in the function amf_object_get within src/amf.c (AMF Object Parsing component). The flaw allows a remote attacker with user interaction to trigger a crash, resulting in a low availability impact (CVSS 3.1: 4.3 MEDIUM ; ...

EUVD-2026-68724

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...

CVE-2023-20511

CVE-2023-20511 affects the AMD kernel mode driver (KMD) , where an invalid pointer release can create a double free condition. A privileged attacker with network access and high attack complexity could potentially exploit this to achieve arbitrary code execution . The CVSS v3.1 score is 6.4 (Medi...

EUVD-2023-60609

Release of an invalid pointer in the AMD kernel mode driver KMD could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution...

CVE-2026-62737

CVE-2026-62737 — ExecutionContext.sys Arbitrary Kernel Call Proof of concept for CVE-2026-62737: ExecutionContext.sys invokes a user-controlled TaskFn pointer in kernel mode without validation, producing a controlled kernel crash. Validated on stock Windows 11 25H2 build 26200.8655, ARM64: 0x7E...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts 用于检测CVE-2019-12255、CVE-2019-12256、CVE-2019-12258和CVE-2019-12260的Suricata LUA脚本 CVE-2019-12255 该脚本检测CVE-2019-12255，被检查的数据包需要设置了PSH、ACK和URG标志，并且有效载荷大小超过1500字节。然后检查紧急指针的值是否设置为0，这会在易受攻击的设备上导致整数下溢。...

CVE-2026-82803

A vulnerability has been found in armink struct2json 1.0. This affects the function S2JSTRUCTGETstringELEMENT in the library struct2json/inc/s2jdef.h of the component JSON Deserialization. The manipulation of the argument valuestring leads to null pointer dereference. The attack may be initiated...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref 是 CVE-2017-2388 的概念验证漏洞利用程序，这是一个 IOFireWireUserClient 中的空指针解引用漏洞，已在 macOS Sierra 10.12.4 中修复。该漏洞可被触发，导致带有 FireWire 端口的设备发生拒绝服务。 CVE-2017-2388 函数 IOFireWireUserClient::setAsyncRefIsochChannelForceStop 在将参数 inAsyncRef 作为源调用 bcopy 之前，未检查...

google-poc

要复现 CVE-2025-13425，只需按以下步骤操作： 步骤 1：克隆最新的 osv-scalibr 源代码： root@kitploit: $ git clone https://github.com/google/osv-scalibr 步骤 2：移除修复提交 https://github.com/google/osv-scalibr/commit/e67c4e198ca099cb7c16957a80f6c5331d90a672 中提到的代码 步骤 3：使用 vmdk.go.patch 补丁，通过以下命令将其应用到 vmdk.go： root@kitploit: $ cd...

CVE-2026-82803

A null pointer dereference in armink struct2json 1.0 affects the function S2J_STRUCT_GET_string_ELEMENT in struct2json/inc/s2jdef.h (JSON Deserialization component). Manipulating the valuestring argument can trigger the dereference, leading to a low availability impact (denial of service). The at...

EUVD-2026-68611

A vulnerability has been found in armink struct2json 1.0. This affects the function S2JSTRUCTGETstringELEMENT in the library struct2json/inc/s2jdef.h of the component JSON Deserialization. The manipulation of the argument valuestring leads to null pointer dereference. The attack may be initiated...

NFSundown

概述 NFSundown（CVE-2025-38089）的概念验证利用代码。它可以远程触发NFS服务器的内核崩溃。 详情 远程攻击者可通过发送特制的RPC请求，触发内核空指针解引用并导致内核崩溃。这是由于在SUNRPC代码路径中未正确处理 rqstp-rqacceptstatp 指针，使其保持为NULL并在错误处理分支中被解引用。在某些情况下（当所有服务器线程至少接受过一次连接时），这还可能导致释放后使用（use-after-free）。该漏洞已被分配编号CVE-2025-38089。 受影响版本...

cve-2014-0038

CVE-2014-0038 本地 root 利用 漏洞: X86X32 的 recvmmsg 系统调用未正确清理从用户空间传递的超时指针。 利用原语: 将内核地址的指针作为超时参数传递给 recvmmsg，如果知道该地址的原始字节，就可以用已知数据覆盖它。如果最低有效字节是 0xff，等待 255 秒后它就会变成 0x00。 限制: 传递地址的第一个长整型（ tvsec ）必须为正，第二个长整型（ tvnsec ）必须小于 1000000000。 概述: 目标定位 ptmxfops 结构体中的 release...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

cve-2016-0040

cve-2016-0040 poc for cve-2016-0040 bug found and exploited by Meysam Firozi @R00tkitSmm this poc help write arbitrary data to arbitrary address in windows kernel for more info see ny blog : http://ioctl.ir/index.php/2016/02/13/cve-2016-0040-story-of-uninitialized-pointer/...