CVE-2016-3238-PoC

CVE-2016-3238-PoC Whitepaper for CVE-2016-3238/MS16-087 Proof Of concept. CVE-2016-3238 allows man-in-the-middle attackers to execute arbitrary code by providing a crafted print driver during printer installation, aka "Windows Print Spooler Remote Code Execution Vulnerability."...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Description This demonstration took place at HITCON 2023 in Taiwan. The demo highlights the exploitation of AMDCpuProfiler.sys within AMD μProf. By triggering an arbitrary write on the EPROCESS token, privilege escalation to SYSTEM level is achieved. Disabling the...

CVE-2017-13672

CVE-2017-13672 POCs for CVE-2017-13672 OOB read in VGA Cirrus QEMU driver, causing DoS...

kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem, specifically within the rxe driver. A remote attacker could exploit this vulnerability by sending a specially crafted ATOMICWRITE request with a zero-byte payload. This improper handling of non-8-byte ATOMICWRITE...

CVE-2025-62470

This is not exploiting, just POC BUGCHECKCODE: 50 BUGCHECKP1: ffffc101f6bf91be BUGCHECKP2: 0 BUGCHECKP3: fffff8007e194409 BUGCHECKP4: 0 READADDRESS: ffffc101f6bf91be MMINTERNALCODE: 0 IMAGENAME: CLFS.SYS MODULENAME: CLFS FAULTINGMODULE: fffff8007e190000 CLFS PROCESSNAME: ConsoleApplication4.exe...

Malicious Package

Overview system-driver is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

VortexCry-Ransomware-Release

VortexCry-Ransomware VortexCry is an advanced ransomware that utilizes multi-stage process injection such as Process Hollowing and APC Injection and kernel driver loading via the CVE-2019-16098 vulnerability. It is capable of encrypting files, destroying system recovery functionalities, and...

CLEANSTART-2026-MW74031 Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network

Security vulnerability affects the apache-hive package. Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network...

CLEANSTART-2026-DW89349 pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE

Security vulnerability affects the apache-hive package. pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE...

DEBIAN-CVE-2026-107315

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

CVE-2026-107315

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

PT-2026-108198

Name of the Vulnerable Software and Affected Versions MongoDB Python Driver affected versions not specified Description The binary accelerator in the driver can perform an out-of-bounds read when decoding malformed BSON that contains a truncated regular-expression element missing a trailing NUL...

PT-2026-108168

Name of the Vulnerable Software and Affected Versions MongoDB PHP Driver affected versions not specified Description The BSON encoder fails to verify certain return values when a document exceeds the size limit of libbson, which can leave the encoder in an invalid state. An unauthenticated actor...

PT-2026-108167

Name of the Vulnerable Software and Affected Versions MongoDB PHP Driver affected versions not specified Description The BSON encoder converts a string length to a 32-bit value without proper validation. If an application encodes a string close to 4 GiB, the allocation size may wrap around while...

Linux Distros Unpatched Vulnerability : CVE-2026-107314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection property excludes all six...

PT-2026-108143

Name of the Vulnerable Software and Affected Versions MongoDB Go Driver affected versions not specified Description An integer overflow occurs during BSON value-length handling, which can trigger a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticat...

PT-2026-108137

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description An off-by-one error exists in the BSON bulk document writer. This occurs when a document ends at a specific buffer boundary, causing the writer to write one zero byte immediately pas...

CVE-2026-106431: Out-of-bounds Write

An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent...

PT-2026-108144

Name of the Vulnerable Software and Affected Versions MongoDB Go Driver affected versions not specified Description Improper validation of a BSON array length can lead to an out-of-bounds index and runtime panic. This occurs when an application invokes the bson.RawArray.Validate or...

PT-2026-108136

Name of the Vulnerable Software and Affected Versions MongoDB C++ Driver affected versions not specified Description The MongoDB C++ Driver discards content following an embedded NUL byte in specific field and collection names processed by the collection API. This behavior allows the driver and t...