CVE-2025-53964

CVE-2025-53964 Risk assessment CVSS v3: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - 9.6/10 Description GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2026-41473-CyberPanel-AI-Scanner-Unauth

CVE-2026-41473 — CyberPanel AI Scanner Unauthenticated Read/Write API Access Nuclei detection template for CVE-2026-41473 affecting CyberPanel versions before 2.4.4. Vulnerability CyberPanel's AI Scanner feature exposes two API endpoints without authentication: Endpoint| Method| Impact ---|---|--...

EchoDrv

EchoDrv Tool permitting to abuse Kernel read/write vulnerability in ECHOAC anti-cheat driver echodriver.sys Usage Example Sponsors I work at POST Luxembourg and thank them for allocating some time for me to develop and maintain this project! Visit POST website at...

kfd

Quick disclaimer: I have no intention of adding offsets for other devices and iOS versions. kfd kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices. It leverages various vulnerabilities that can be exploited to obtain dangling PTEs, which will be...

CVE-2025-14321

CVE-2025-14321 Proof of Concept Description PoC for a Use-After-Free UAF vulnerability in the RTCEncodedFrameBase component of Firefox, exploitable via the WebRTC Encoded Transforms API. CVE-2025-14321 : The destructor of RTCEncodedFrameBase does not call DetachArrayBuffer when releasing the nati...

CVE-2025-66678

CVE-2025-66678 En Hardware Read & Write Utility v1.25.11.26, el controlador expuso lectura y escritura arbitrarias de MSR, así como lectura y escritura de memoria física a través de MmMapIoSpace, ambas habilitan la ejecución de código en el kernel. Detalle del PoC El PoC intercambiará el token...

ZeroHVCI

ZeroHVCI - Defeating HVCI without admin privileges or a kernel driver ZeroHVCI accomplishes arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity HVCI protected environments calling without admin permissions or kernel drivers. Features Full non-privileged kernel...

PS5-UMTX-Jailbreak

PSFree version 1.4.0 PSFree is a WebKit exploit using CVE-2022-22620 to gain arbitrary read/write. vulnerable: PS4 6.xx-9.xx tested 6.00-9.60 PS5 1.xx-5.xx tested 1.00-5.50 CREDITS: anonymous for PS4 firmware kernel dumps janisslsm from ps4-dev on discord.com contributed ROP chain managers for 8....

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp This program is an exploit for CVE-2018-8453. The vulnerability itself exists in Windows 7 and later versions. Note: It can only be exploited on Windows 8.1 and later versions! Therefore, this EXP can only be used on Windows 8.1 and later versions...

EUVD-2026-91136

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-104201

GHSA-wj29-mxmc-q98c: Heap OOB read/write in MS-MPPE key re-encryption...

CVE-2026-104201

GHSA-wj29-mxmc-q98c: Heap OOB read/write in MS-MPPE key re-encryption...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

vivo-root-build

PD2415 6.6.89 Candidato de Flujo Completo Esta fuente se basa en el motor IonStack PD2415 6.6.57 del mismo dispositivo/mismo SoC: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. El cierre del portador de dumpstate se conserva del método PD2241 validado. El objetivo archivado 6.6.89 mantiene...

desc_race-1

descrace "descrace" CVE-2021-30955 exploit for iOS 15.0 - 15.1.1 with stable kernel r/w primitives Exploit Method 1. Increase the capacity of IOSurfaceClient array to 0x2000, goal is to write a pointer whose content is totally controlled and then use IOSurfaceRootUserClient interfaces to achieve...

CVE-2025-7771

Una aplicación de exploit escrita en Rust para CVE-2025-7771 Un vistazo al código fuente data.rs, almacena el binario del controlador vulnerable como un arreglo estático exploit.rs, implementa primitivas de lectura/escritura arbitrarias basadas en ese controlador vulnerable filemap.rs, un...

CVE-2021-25741

About It's exploit for CVE-2021-25741 vulnerability. This vulnerability allows to mount Node filesystem inside of new POD with read-write privileges. You can read more about the vulnerability here: https://security.googleblog.com/2021/12/exploring-container-security-storage.html I'm not author of...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2+ This PoC is using the HackSysExtremeVulnerableDriver. The PoC supports both arbitrary write and arbitrary increment, controlled through a flag passed...

qu1ckr00t

qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 Local Privilege Escalation PoC Overview This project is an educational proof-of-concept for a Local Privilege Escalation LPE vulnerability in the driver iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 — the Intel...