CVE-2018-17463

CVE-2018-17463 Completed a working exploit for CVE-2018-17463 for fun. The original writeup that I found on this bug was here http://phrack.org/papers/jitexploitation.html. I just really wanted to change this arb r/w into a fully working exploit. Also I learned the JIT spray technique from the...

lenovo-dispatcher-poc

Lenovo Dispatcher PoC This is a basic proof of concept to exploit lenovo dispatcher driver LnvMSRIO.sys CVE-2025-8061. Vulnerabilities found by Luis Casvella source: https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html. The main idea of this poc is to exploit the read/write...

IKEV2-POC

EpSiLoNPoInTIkEv2.cpp ⚠️ 最終調整中のプロジェクト。現状では完全に機能しません。 説明 EpSiLoNPoInTIkEv2.cpp は、Windows を標的とした C/C++ エクスプロイトのプロトタイプであり、ikeext.dll（Windows の IKEv2 ドライバ）における ダブルフリー タイプのエクスプロイトを中心に開発されています。研究過程で CVE-2026-33824 として参照されています。 このプロジェクトには以下が含まれます： 完全な難読化層（仮想マシン、制御フロー難読化、文字列隠蔽、偽のバイナリ署名、インライン ASM による解析対策）。...

CVE-2025-21333

CVE-2025-21333 you can find the first version of exploit for this CVE at https://github.com/MrAle98/CVE-2025-21333-POC/tree/master . I made this new exploit inspired from the one made by MrAle98. It is more stable and little sketchy as it doesn't open windows sandbox process for getting the GUID....

CVE-2020-15368

How to exploit a vulnerable windows driver Exploit and Proof of Concept PoC for CVE-2020-15368. Asrock repackaged rweverything driver for their RGB controller configuration tool and signed it. They "protect" it by encrypting their ioctls...lol. We found this CVE by accident last summer, and afaik...

PS5-UMTX-Jailbreak

PS5 UMTX Jailbreak Sommario Questo repository contiene un exploit WebKit ROP della vulnerabilità UMTX race use-after-free CVE-2024-43102 segnalata da Synacktiv. In pratica è un porting della strategia di exploit di fail0verflow e di flatz. Abusa della UAF per ottenere una mappatura di...

qu1ckr00t

qu1ckr00t PoC-приложение, демонстрирующее возможности произвольного чтения/записи R/W в ядре Android CVE-2019-2215. Разбор: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t — это ПРОТОТИП PROOF OF CONCEPT. Его НЕ следует использовать на вашем личном устройстве ...

CVE-2021-21551

CVE-2021-21551 Exploit proof-of-concept per CVE-2021-21551, la vulnerabilità deriva da indirizzi forniti dall'utente passati come argomenti a una chiamata memmove che consente una lettura/scrittura arbitraria ioctl 0x9B0C1EC4 e 0x9B0C1EC8 nonché il parametro dell'indirizzo fisico per una chiamata...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC Este repositório contém uma prova de conceito PoC de execução remota de código RCE que visa o PlayStation 4 no firmware 6.20, explorando a CVE-2018-4441. O exploit primeiro estabelece uma primitiva de leitura/escrita arbitrária, bem como um vazamento de endereço...

CVE-2022-23222

CVE-2022-23222 Chinesischer Writeup: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt Nur für Bildungs- und Forschungszwecke. Verwendung auf eigene Gefahr. Erstellen & Ausführen root@kitploit: $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps...

CVE-2025-6554

CVE-2025-6554 Dieses Repository enthält Dieses Repository konstruierte und bewies die addressof- und fakeobj-Primitiven sowie die willkürlichen Lese-/Schreib-Primitiven in der V8-Sandbox. Informationen zur Reproduktion Commit: 609a85c2a1bd77d6f6905369f4bc4fcf34c5db09 Command Line:...

CVE-2025-5419

CVE-2025-5419 Uma vulnerabilidade de leitura não inicializada causada pela eliminação incorreta de Store-Store no Turboshaft no V8. Este repositório contém análise e exploit estabilizado para escalar esta vulnerabilidade e alcançar primitivas de Leitura/Escrita Arbitrária, AddressOf e FakeObject...

CVE-2025-7771

Un'app exploit scritta in Rust per CVE-2025-7771 Uno sguardo al codice sorgente data.rs, memorizza il binario del driver vulnerabile come array statico exploit.rs, implementa primitive di lettura/scrittura arbitrarie basate su quel driver vulnerabile filemap.rs, un semplice wrapper per le...

CVE-2025-21333-POC

CVE-2025-21333-POC Proof-of-Concept, der CVE-2025-21333 in vkrnlintvsp.sys ausnutzt nicht sehr zuverlässig, siehe Abschnitt „Anforderungen und Einschränkungen“. Im Abschnitt „Referenzen“ finden sich hilfreiche Ressourcen für diejenigen, die mit dem Exploit spielen möchten. Eine detaillierte Analy...

cve-2016-7190

Panoramica CVE-2016-7190 0 è un heap overflow nella funzione Array.map di ChakraCore che consente di sovrascrivere la memoria adiacente. L'idea principale per ottenere accesso arbitrario in lettura/scrittura è prima allocare un numero di Array di interi JavaScript consecutivi e sfruttare l'overfl...

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, and watchOS 10.5. An attacker with arbitrary read and write capabilities may be able to bypass Pointer Authentication...

Astra Linux – Vulnerability in Chromium

Integer overflow in Codecs in Google Chrome prior to version 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write operations through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14122

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Before version 146.0.7680.153, read and write operations in WebGL in Google Chrome allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Critical...