CVE-2020-0022

CVE-2020-0022 非常感谢 Insinuator 提供的精彩博文和代码！ 结果 Insinuator 博客中提到的所有步骤都已完成，甚至更多。这些步骤太多，无法完整放入 README.md 文件，因此请自行查阅上述 Insinuator 的博文。 该漏洞利用已完成到以下阶段： 1. 泄漏了攻击者控制的足够大的内存区域地址 2. 程序计数器被修改为指向自定义地址 3. 自动重试直到失败概率显著降低 4. 在断开时间和内存搜索速度方面进行了优化，以至于进一步优化会损害漏洞利用的稳定性 差异与改进 此漏洞利用与 Insinuator 的实现有以下不同： 1. 它用 C 语言编写而非...

CVE-2026-14382

CVE-2026-14382 Bin 触发器 Bug 修复 root@kitploit: $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 此漏洞的根本原因似乎与 CVE-2025-6558 相似。基于我目前的分析，我怀疑它可能是 CVE-2025-6558 的一个变体。因此，我改编了 CVE-2025-6558 的 PoC，并创建了以下文件： poc.c 是主要的 PoC，但仅适用于 ...

CVE-2020-0022

CVE-2020-0022 Muchas gracias a Insinuator por su increíble publicación y código! Resultados Todos los pasos mencionados en la publicación de Insinuator se han completado, y más. Son muchos pasos para incluir en un archivo README.md, así que siéntase libre de consultar la publicación de Insinuator...

CVE-2025-51675

CVE-2025-51675 affects the openRISC OR1200 processor (commit 83ac6b). The root cause is an inaccurate update of program counter (PC) values when SPR (Special Purpose Register) changes , which can lead to a Denial of Service . No specific affected version range, patch version, or exploit details a...

EUVD-2025-210799

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...

CVE-2021-41614

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to the Exception Program Counter Register EPCR are not implemented correctly. User programs from an unauthorized privilege level can make read/write accesses to EPCR...

CVE-2023-54232

In the Linux kernel, the following vulnerability has been resolved: m68k: Only force 030 bus error if PC not in exception table getkernelnofault does copy data in supervisor mode when forcing a task backtrace log through /proc/sysrqtrigger. This is expected cause a bus error exception on e.g. NUL...

PT-2025-54061

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the handling of bus errors on m68k systems. Specifically, the get kernel nofault function can cause a bus error exception when logging a kernel task...

EUVD-2017-17966

Malware in sbrugna...

EUVD-2018-10279

Malware in sbrugna...

EUVD-2021-28628

Malicious code in bioql PyPI...

EUVD-2025-9057

Malicious code in bioql PyPI...

Zeratool

This repository, Zeratool, is an automatic exploit generation tool for exploitable CTF Capture The Flag problems. It uses the angr concolic analysis engine to analyze binaries and identify vulnerabilities, and then weaponizes these vulnerabilities for remote code execution through pwntools. The...

Linux Distros Unpatched Vulnerability : CVE-2018-18559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanoutadd from setsockopt and bind on an AFPACKET socket. This issu...

Reverb use after free vulnerability

There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a tensor proto of type VARIANT is unpacked, memory is first allocated to store the entire tensor, and a ctor is called on each instance...

CVE-2024-8375

There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a tensor proto of type VARIANT is unpacked, memory is first allocated to store the entire tensor, and a ctor is called on each instance...

Exploit for Incorrect Calculation in Google Android

CVE-2020-0022 Many thanks to Insinuator for their amazing blo...

Espressif ESP32 安全漏洞

The Espressif ESP32 is a microcontroller from China Loxin Information Technology Espressif. A security vulnerability exists in the Espressif ESP32 3.0 ESP32rev300 ROM, which arises from an EMFI attack on the ECO3 that is capable of affecting CPU context-level PC values, regardless of secure boot...

CVE-2021-41614

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to the Exception Program Counter Register EPCR are not implemented correctly. User programs from an unauthorized privilege level can make read/write accesses to EPCR...

PT-2023-12379 · Unknown · Openrisc Mor1Kx Processor

Name of the Vulnerable Software and Affected Versions: OpenRISC mor1kx processor affected versions not specified Description: An issue was discovered in the controller unit of the OpenRISC mor1kx processor, where the read/write access permissions to the Exception Program Counter Register EPCR are...