Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-43300: O.o.B Wrrite in ImageIO CVE-2025-24201: WebKit Remote Code Execution CVE-2025-24085: Core Media Privilege Escalation Patched: Jan-March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 VirusTotal Analysis Verified Hash Summary...

CVE-2020-1493

CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Windows 10 1909 x64, Also This vulnerability is zero click vulnerability. TLDR; I found this bug usng winafl fuzzer. This bug occured when parsing ms-tnef file. that attachement of eml file. vulnerable method re...

glass-cage-i18-2025-24085-and-cve-2025-24201

Original Fork Network Left Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-24201 – WebKit Remote Code Execution CVE-2025-24085 – Core Media Privilege Escalation Reported to Apple: January 9, 2025 Patched: February–March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 CVSS Base Score...

CVE-2025-48593

CVE-2025-48593 "A single malicious packet can own your device." — Android Security Team, Nov 2025 Zero-Click Remote Code Execution in Android System Bluetooth Subsystem ⚠️ Critical Scope Clarification Updated April 2026 Standard phones and tablets are NOT vulnerable. CVE-2025-48593 only affects...

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

CVE-2025-31200 & CVE-2025-31201 | iMessage Zero-Click RCE Chain Summary This repository documents research into a zero-click remote exploit chain affecting iOS 18.x and beyond. A malformed AMR audio file delivered via iMessage triggers: 1. Heap corruption in CoreAudio CVE-2025-31200 — in...

zero-click-exploit-analysis

Zero-Click, Old Tricks Anatomy of the 2025 WhatsApp/ImageIO zero-click exploit chain CVE-2025-55177 + CVE-2025-43300. Research paper plus an interactive web companion with CVE walkthroughs, patch diffs, and hands-on heap/stack labs. Live site: https://mcs.danielwagner.ro Paper PDF:...

CVE-2020-0022

CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 By Polo35 - 2020/08/24 "Usage: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Based on scripts by Jan Ruge CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click R...

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

CVE-2025-54328 — Samsung Exynos SMS RP-DATA Stack Buffer Overflow Conceptual PoC for CVE-2025-54328, a CVSS 10.0 Critical stack-based buffer overflow in Samsung Exynos baseband firmware's SMS RP-DATA parser. Article Full write-up: Samsung Exynos SMS Stack Overflow: CVE-2025-54328 — Critical...

CVE-2025-48593

CVE-2025-48593: Zero-Click Remote Code Execution in Android System Author: LAKSHMIKANTHAN K letchupkt Date: November 2025 Severity: Critical A critical zero-click remote code execution vulnerability affecting Android 13-16 devices. Vulnerability Overview Attribute| Details ---|--- CVE ID|...

Follina_Exploiter_CLI

Follina Exploiter CLI Tool MSDT Vulnerability CVE-2022-30190 A Command Line based python tool for exploit Zero-Day vulnerability in MSDT Microsoft Support Diagnostic Tool also know as 'Follina' CVE-2022-30190. Info : New Microsoft Office zero-day used in attacks to execute PowerShell Made In...

CVE-2025-50154

CVE-2025-50154, CVE-2025-59214 Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure By Ruben Enkaoua and Cymulate First Blog: Zero Click, One NTLM: Microsoft Security Patch Bypass CVE-2025-50154 Second Blog: Patched Twice, Still Bypassed: New NTLM Leak CVE-2025-50154 Patch Bypass Descripti...

CVE-2025

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Overview CVE-2025-43300 is a critical memory corruption vulnerability in Apple's image processing framework that affects iOS 18.6.1 and macOS systems. The vulnerability exists in the JPEG Lossless decompression code within...

CVE-2024-38063

CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...

Fix-Apple-Mail-CVE-2020-9922

Fix-Apple-Mail-CVE-2020-9922 Apple Mail has a scary zero-click vulnerability. Versions of OS X prior to High Sierra were not patched. https://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c I made this quickly and only tested it on Mavericks. I don't see any...

CVE-2026-0073

0-Click RCE on Android Critical vulnerability CVE-2026-0073 in Android ADB, an authentication bypass flaw in the TLS certificate verification of the adbd daemon, specifically in the adbdtlsverifycert function. The TLS certificate verification makes Wireless Debugging accept an attacker as if they...

Moniker-Link--CVE-2024-21413-

🔗 Moniker Link CVE-2024-21413 — A Practical Guide to the Outlook Zero-Click Vulnerability 📌 1. Introduction CVE-2024-21413 , commonly referred to as the Moniker Link vulnerability , is a critical security flaw in Microsoft Outlook that enables attackers to leak user credentials without requiring...

CVE-2023-23397

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. Description Outlook suffers from a lack of control over the user input that allows to configure the sound of a meeting and appointment reminder. Indeed, an attacker is able to force a victi...

adbHijacker

CVE-2026-0073 — Android ADB TLS Authentication Bypass A proof-of-concept exploit and network scanner for CVE-2026-0073 , a critical zero-click, no-interaction remote code execution vulnerability in Android adbd's ADB-over-TCP authentication path. The vulnerability is a logic bug in...

CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC When a file is processed by Dolby's DDPlus Unified Decoder, an out of bounds write is possible when the evolution data is processed. The decoder writes evolution information into a large, heap-like contiguous buffer contained by a larger struct, and the...

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow in Apple iOS/iPadOS ╔══════════════════════════════════════════════════════════════╗ ║ SEVERITY: CRITICAL │ CVSS: 9.8 │ CWE-120 │ REMOTE ║ ╚══════════════════════════════════════════════════════════════╝ A remote user can cause unexpected system termination or...