CVE-2026-14382

CVE-2026-14382 バイナリトリガー Bug fix root@kitploit: $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 この脆弱性の根本原因はCVE-2025-6558と類似しているようです。現在の分析に基づくと、CVE-2025-6558の亜種である可能性が高いと考えています。そこで、CVE-2025-6558のPoCを応用して以下のファイルを作成しました。...

CVE-2020-0022

CVE-2020-0022 Insinuator의 놀라운 블로그 게시물과 코드에 많은 감사를 전합니다! 결과 Insinuator 게시물에 언급된 모든 단계가 완료되었으며, 그 이상도 수행되었습니다. 이러한 단계는 README.md 파일에 넣기에는 많으므로 위에서 언급한 Insinuator의 게시물을 확인해 주세요. 익스플로잇은 다음 지점까지 완전히 완료되었습니다: 1. 공격자가 제어하는 충분히 큰 메모리 영역의 주소가 유출됩니다 2. 프로그램 카운터가 사용자 지정 주소를 가리키도록 수정됩니다 3. 실패 확률이 크게 감소할 때까지...

CVE-2020-0022

CVE-2020-0022 Insinuator の素晴らしいブログ記事とコードに心から感謝します! 結果 insinuator の投稿に記載されているすべての手順を完了し、さらに追加の作業も行いました。これらの手順は README.md ファイルに記載するには数が多すぎるため、前述の Insinuator の投稿を参照してください。 エクスプロイトは以下の時点まで完全に完成しています: 1. 攻撃者が制御する十分に大きなメモリ領域のアドレスがリークされる 2. プログラムカウンタがカスタムアドレスを指すように変更される 3. 失敗の確率が大幅に低下するまで、自動的にリトライが行われる ...

CVE-2025-51675

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...

CVE-2025-51675

CVE-2025-51675 affects the openRISC OR1200 RISC-V processor, specifically at commit 83ac6b . The vulnerability stems from an inaccurate update of program counter (PC) values when SPR (Special Purpose Register) changes , which can result in a Denial of Service (DoS) . The CVSS 3.1 score is 7.5 (HI...

EUVD-2025-210799

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...

CVE-2021-41614

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to the Exception Program Counter Register EPCR are not implemented correctly. User programs from an unauthorized privilege level can make read/write accesses to EPCR...

CVE-2023-54232

In the Linux kernel, the following vulnerability has been resolved: m68k: Only force 030 bus error if PC not in exception table getkernelnofault does copy data in supervisor mode when forcing a task backtrace log through /proc/sysrqtrigger. This is expected cause a bus error exception on e.g. NUL...

PT-2025-54061

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the handling of bus errors on m68k systems. Specifically, the get kernel nofault function can cause a bus error exception when logging a kernel task...

EUVD-2017-17966

Malware in sbrugna...

EUVD-2018-10279

Malware in sbrugna...

EUVD-2021-28628

Malicious code in bioql PyPI...

EUVD-2025-9057

Malicious code in bioql PyPI...

Zeratool

This repository, Zeratool, is an automatic exploit generation tool for exploitable CTF Capture The Flag problems. It uses the angr concolic analysis engine to analyze binaries and identify vulnerabilities, and then weaponizes these vulnerabilities for remote code execution through pwntools. The...

Linux Distros Unpatched Vulnerability : CVE-2018-18559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanoutadd from setsockopt and bind on an AFPACKET socket. This issu...

Reverb use after free vulnerability

There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a tensor proto of type VARIANT is unpacked, memory is first allocated to store the entire tensor, and a ctor is called on each instance...

CVE-2024-8375

There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a tensor proto of type VARIANT is unpacked, memory is first allocated to store the entire tensor, and a ctor is called on each instance...

Exploit for Incorrect Calculation in Google Android

CVE-2020-0022 Many thanks to Insinuator for their amazing blo...

Espressif ESP32 安全漏洞

The Espressif ESP32 is a microcontroller from China Loxin Information Technology Espressif. A security vulnerability exists in the Espressif ESP32 3.0 ESP32rev300 ROM, which arises from an EMFI attack on the ECO3 that is capable of affecting CPU context-level PC values, regardless of secure boot...

CVE-2021-41614

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to the Exception Program Counter Register EPCR are not implemented correctly. User programs from an unauthorized privilege level can make read/write accesses to EPCR...