CVE-2022-31902

CVE-2022-31902 Denial Of Service DoS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening a specially crafted text file e.g. first.txt and then using options Find All in All Opened Document or Find All in Current Opened Document under Find options. As an...

CVE-2022-31901

CVE-2022-31901 Denial Of Services DOS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening two specially crafted text files e.g. first.txt & second.txt as input to notepad++. As an illustrative example below, as of 11/07/2022, latest version of Notepad++x86 is...

easy-file-share-7.2-exploit-CVE-2018-9059

easy-file-share-7.2-exploit-CVE-2018-9059 Easy File Sharing Web Server 7.2 - 'UserID' mi versión, bypass de 'DEP' mi versión sobre ello Probado en Win 7 Ultimate x86...

CVE-2020-9047

Usage/Help Menu root@kitploit: usage: CVE-2020-9047.py -h -p RPORT -s LPORT --command -d WEBDIR -U USERNAME -P PASSWORD WINDOWS,LINUX,CHECK RHOST LHOST PAYLOAD Exploit for exacqVision Web Service as outlined in CVE-2020-9047. This program targets Windows and Linux x86 installations of exacqVision...

smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii 非常に非常に非常に非常に非常に非常に長い割り込みでシステム管理モード（SMM）を悪用する。 概要 実は、SMM（すべてのx86 CPUのバックグラウンドで不可視に動作する、安全で特権的な実行環境）を、途方もなく長く実行される機械語命令だけで破壊できることが判明した。 SMMでは、すべてのコアが同時にSMM内かSMM外のどちらかにいなければならない。この前提がなければセキュリティモデルは機能しない。あるスレッドがSMMに入ると、他のすべてのスレッドもSMMに入るように強制されるからだ。...

CVE-2026-100503

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

CVE-2026-100503

Ghidra versions through 12.1.4 are affected by a heap use-after-free vulnerability within the decompiler's Funcdata::opInsertAfter function. The root cause is attributed to stale INDIRECT effect-op references . An attacker can trigger this vulnerability by providing a malicious binary containing ...

CVE-2026-100503 Ghidra through 12.1.4 Heap Use-After-Free in Decompiler

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

hwbp4mw

This article was origininally for VX-Underground Black Mass Halloween Edition 2022. Hooking Engines: Multi-thread safe x86/x64 hwbp hooking engine c PAGEGUARD/hwbp Breakpoint Library c++20 hwbp Library DLL example c++20 Generic x64 user-land evasion technique utilizing debug registers:...

exec-prot-bypass

Executable Space Protection Bypass CVE-2022-25265 This POC demonstrates execution of bytes located in supposedly non-executable region of binary, therefore completely bypassing executable-space protection. The root cause of this can be found here:...

ropfuscator

Disclaimer ROPfuscator is a research proof of concept and is not intended for production use. The authors do not take any responsibility or liability for the use of the software. Please exercise caution and use at your own risk. ROPfuscator ROPfuscator is a fine-grained code obfuscation framework...

sc2elf

sc2elf Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF. Both 32-bit and 64-bit x86, x64 shellcode is supported - resulting in 32-bit or 64-bit ELF. Releases are compiled for both linux-x64 and win-x64. Description It is compiled to Native AOT format to demonstrate...

retbleed-speculative-execution-poc

Retbleed: Arbitrary Speculative Code Execution via RSB Underflow A hands-on reproduction of Retbleed CVE-2022-29900 / CVE-2022-29901 — the 2022 micro-architectural attack that broke the "Retpoline" defense by proving that ret instructions, long assumed safe, can be hijacked when the CPU's Return...

AZL-104360 CVE-2026-97960 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe stale buffer state and potentially access out-of-bound memory. Most...

DEBIAN-CVE-2026-97943

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

CVE-2026-97943

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

DEBIAN-CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

DEBIAN-CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...

CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...