gsscred-move-uaf

GSSCred-move-uaf The com.apple.GSSCred XPC service, which runs as root on macOS and iOS, does not properly implement the "move" command, leading to a use-after-free condition in the doMove function. The GSSCred service can be reached from within the default application sandbox on iOS. This progra...

CVE-2012-5960-PoC

CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Proof of Concept 隨手記錄一下最近玩的東西。 !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' \ 'HOST:239.255.255.250:1900\r\n' \ 'MX:3\r\n' ...

sagex3-cve-2020-7388-poc

sagex3-cve-2020-7388-poc Proof of concept exploit code for CVE-2020-7388, an unauthenticated RCE as SYSTEM on Sage X3's AdxDSrv Service Overview Sage X3 exposes an administrative service on port TCP/1818 default, but changeable under the process "AdxDSrv.exe," part of the AdxAdmin component. This...

CVE-2014-7911-CVE-2014-4322_get_root_privilege

CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: andy website: https://blog.csdn.net/koozxcv how to build Import the project into eclipse,and build. bug info http://seclists.org/fulldisclosure/2014/Nov/51 analysis...

gdid-reversal

Full writeup of the Windows GDID Global Device Identifier fully reverse engineered -8a2be2 -0078d6 How Microsoft's "Global Device Identifier", the persistent Windows fingerprint named in the July 2026 Scattered Spider complaint, is actually generated, stored, and transmitted. TL;DR !NOTE Listed...

S-V-Project-Implementation-of-CVE-2015-3256

CVE-2015-3456 VENOM — QEMU Crash PoC and Analysis This repository contains a reproducible crash/DoS proof-of-concept for CVE-2015-3456 "VENOM" using a vulnerable version of QEMU v2.3.0. The project demonstrates: Guest-controlled writes to the virtual floppy disk controller FDC Triggering the...

CVE-2023-29343

CVE-2023-29343 This is PoC for arbitrary file write bug in Sysmon version 14.14 After last patch Sysmon would check if Archive directory exists and if it exists it would check if archive directory is owned by NT AUTHORITY\SYSTEM and access is only granted to NT AUTHORITY\SYSTEM. If both condition...

EUVD-2026-92182

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitatio...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. If a User Equipment (UE) connects to a rogue base station controlled by an attacker, this could result in a remote denial of service . No additional execution privileges or user inte...

EUVD-2026-92183

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20540

The Modem component is vulnerable to an out of bounds read caused by a missing bounds check. If a user equipment (UE) connects to a rogue base station controlled by an attacker, it could lead to a remote denial of service . No additional privileges or user interaction are required for exploitatio...

CVE-2026-20539

A missing bounds check in the Modem component leads to a possible out of bounds read . This vulnerability can result in a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are requir...

CVE-2026-20538

A vulnerability exists in the Modem component due to a missing permission check , which can lead to an out of bounds read . An attacker controlling a rogue base station can exploit this to cause a remote denial of service when a user equipment (UE) connects to it. No additional execution privileg...

EUVD-2026-92185

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitatio...

EUVD-2026-92189

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20534

A vulnerability exists in the Modem component due to an out-of-bounds read caused by an incorrect bounds check. If a UE connects to a rogue base station controlled by an attacker, this could lead to a remote denial of service . No additional execution privileges or user interaction are required f...

CVE-2026-20532

A double free vulnerability exists in apu , which can lead to an application crash . This vulnerability allows for a local denial of service without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249024 (Issue ID: MSV-9168). No informat...

EUVD-2026-92191

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168...

CVE-2026-20527

A vulnerability in the Modem component allows for a system crash due to a missing bounds check (CWE-129 ). An attacker could trigger a remote denial of service by tricking a User Equipment (UE) into connecting to a rogue base station . No additional execution privileges or user interaction are re...

EUVD-2026-92200

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...