-CVE-2018-0834-aab-aar

Shoutout to @reubensammut, u a beast G. CVE-2018-0834 full code execute. include static offsets, bypasses cfg,dep,aslr : enjoy...

CVE-2014-4378

CoreGraphics Information Disclosure - CVE-2014-4378 This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fail...

ASLRay

ASLRay Exploit de bypass de ASLR DEP/NX en Linux ELF x32/x64 con stack-spraying Propiedades: Bypass de ASLR Bypass de DEP/NX Multiplataforma Minimalista Simplicidad No parcheable Dependencias: Linux 2.6.12+ - funcionaría en cualquier SO basado en Linux x86-64 BASH - todo el script Limitaciones: L...

CVE-2023-4911

Proof of concept for CVE-2023-4911 Looney Tunables This vulnerability has been discovered by Qualys Threat Research Unit. Here you can read the advisory they published; it explains the vulnerability in depth. The exploit has been tested on Ubuntu 22.04.2 LTS with GLIBC 2.35-0ubuntu3.1. Testing th...

nginx-rift-private-lab

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This fork extends the original PoC with an ASLR-bypass...

Metaphor

Metaphor Metaphor - Stagefright con bypass de ASLR Por Hanan Be'er de NorthBit Ltd. Enlace al whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter: https://twitter.com/HighByte ¡El código fuente de Metaphor ya está disponible! El código incluye un PoC...

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler Use After Free 1. PDF Format Background 2. Encryption Dictionaries 3. Vulnerability Details 4. ASLR and DEP Bypass 5. Environment Details 6. Trigger 7. Author PDF Format Background PDF is a file format used to represent documents. A pdf is made of multiple...

android712-blueborne

android712-blueborne Android Blueborne RCE CVE-2017-0781 In November 2017 a company called Armis published a proof of concept PoC of a remote code execution vulnerability in Android via Bluetooth CVE-2017-0781, known as BlueBorne. Although BlueBorne refers to a set of 8 vulnerabilities, this PoC ...

Exploits

A collection of exploits developed by @xer0dayz @Sn1perSecurity https://sn1persecurity.com Vulnserver.exe GMON SEH Overflow Exploit FreeFloat FTP Server HOST Buffer Overflow ASLR Bypass CoolPlayer+ Portable 2.19.6 Stack Overflow ASLR Bypass HTTPoxy Exploit/PoC Scanner Ability FTP 2.34 Buffer...

Jump-over-ASLR-BTB

Предсказатели ветвлений и ASLR Автор: Byte Reaper Описание Этот репозиторий содержит исследовательскую реализацию на C, демонстрирующую концепции, связанные с предсказателями ветвлений, спекулятивным выполнением и кэш-ориентированными побочными каналами в контексте рандомизации распределения...

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32 bits Télécharger cette version : https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe Bypass ASLR, DEP Non Bypass CFG Analyse Blog de l'équipe Blog d'un membre de l'équipe - mntly Adobe roo...

vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak

vLLM = 0.23.0 incompletely fixes CVE-2026-22778. The original fix added sanitizemessage to the OpenAI router but the Anthropic-compatible router /v1/messages echoes strexc directly. id: CVE-2026-54236 info: name: vLLM = 0.23.0 - Anthropic Router Heap Address Information Leak author: kenlacroix...

Bropper

BROPPER Una herramienta python automática de explotación Blind ROP Resumen BROP Blind ROP fue una técnica descubierta por Andrew Bittau de Stanford en 2014. Original paper Slides La mayoría de servidores como nginx, Apache, MySQL, realizan un fork y luego se comunican con el cliente. Esto signifi...

ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

CVE-2023-4427

CVE-2023-4427 CVE-2023-4427 was found by glazunov, and you can find RCA in his report chrome version: 117.0.5938.62 in linux from v8ctf. I choose a very unstable method. To bypass ASLR, use many iframes with different domains in main.html to brute high address, you can change your /etc/hosts to...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch exploitation and patch video: https://www.youtube.com/watch?v=XU-U4K270Z4 Пост в блоге Qihoo 360...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch video de explotación y parche: https://www.youtube.com/watch?v=XU-U4K270Z4 Entrada de blog de Qihoo 360...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC Local Security Bypass Inter Process Communication through shared memory is a concept where two or more process can access the common memory. And communication is done via this shared memory where changes made by one process can be viewed by another process. The kern...

CVE-2015-6086

From Crash to Exploit: CVE-2015-6086 - Out of Bound Read/ASLR Bypass root@kitploit: $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ $$\ $$ | $$ |$$ | $$ $$\ $$$ $$\ $$$$ | $$ | $$ $$\ $$$ $$\ $$ $$\ $$ / |$$ | $$ |$$ | / $$ |$$$$\ $$ |$$ | $$ | $$ / |$$$$\ $$...

EUVD-2026-69296

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...