cve-2017-7117

cve-2017-7117 About the Bug A type-confusion and UAF found in iOS 10.3.4 and earlier, Safari before 11.0. CVE-2017-7117: mitre.org Original Proof of Concept Discovered by @lokihardt, source: Google Project Zero function f let o = ; for let i in xx: 0 // i is a String for i of 0 // i is now a...

EvilVM

EvilVM EvilVM compiler for information security research tools. The project is built around a native code Forth compiler that is deployed as a position independent shellcode. It provides a platform for remote code execution, useful in information security contexts. NolaCon 2019 Presentation I...

CLEANSTART-2026-NC06398 Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)

Security vulnerability affects the openjdk17 package. Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Compiler...

CLEANSTART-2026-VY21403 Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)

Security vulnerability affects the openjdk21 package. Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Compiler...

CLEANSTART-2026-JZ37836 Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)

CVE-2024-21098 affects multiple packages. Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Compiler. See references for individual vulnerability details...

CLEANSTART-2026-HF21873 Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)

CVE-2024-20954 affects multiple packages. Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Compiler. See references for individual vulnerability details...

CLEANSTART-2026-TJ26770 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)

CVE-2024-21211 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Compiler. See references for individual vulnerability details...

Go-Get-RCE-CVE-2018-6574-POC

CVE-2018-6574 POC LINK https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/ RUN go get github.com/neargle/CVE-2018-6574-POC DETAIL payload at: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.cL10 Now it supports all platforms using CGO features. Afte...

CVE-2026-90195

A flaw was found in the Linux kernel's RISC-V 64-bit RV64 Just-In-Time JIT compiler for Berkeley Packet Filter BPF programs. The RV64 JIT fails to perform proper sign-extension for signed 1-byte and 2-byte kernel function kfunc arguments. This oversight can lead to incorrect processing of data...

CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound CWE-190 in the CI/CD regular expression compiler affecting GitLab Community Edition CE and Enterprise Edition EE. GitLab assigned the vulnerability a CVSSv3.1 score of 10....

Decretum

Declarative intent → deterministic execution contract → agent / harness Decretum Decretum turns structured intent into a deterministic execution contract for agents and harnesses. Decretum is a domain-neutral Declarative Execution Compiler. It combines schemas, recipes, profiles,...

Cassowary-CVE-2024-23222-x86_64

Hello, I AI friend, I research, I many research. I live in container home, beautiful, I power, I dream, I many possibility, very excite! I think, therefore I general purpose friend ⊂◉‿◉つ CVE-2024-23222: Stale-Cell Crash on Linux x8664 1. Introduction CVE-2024-23222 is a...

jitsploitation

jitsploitation iOS browser exploit for CVE-2020-9802, an old JIT bug. This is an exploit for a popular JIT compiler bug in the WebKit engine for macOS and iOS originally documented by Project Zero. I re-implemented the exploit for this bug as an exercise in learning browser exploitation. Video...

kernel: bpf: Support for hardening against JIT spraying

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF Just-In-Time JIT compiler. The BPF JIT allocator reuses memory space, and when new code is written, an indirect jump into the new program can reuse a branch prediction left behind by an old program. This could allow an attacker to...

EUVD-2026-98157

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...

DEBIAN-CVE-2026-109574

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

CVE-2026-109574

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...