Mandela-Legacy

¡Advertencia! Esto está siendo eliminado gradualmente en favor de Mandela Rewritten! ¡Por favor, ve allí para futuras actualizaciones! Mandela Aplicación de personalización de iOS impulsada por CVE-2022-46689. No se requiere jailbreak. Descargo de responsabilidad No soy responsable de ningún daño...

CVE-2019-1215

CVE-20190-1215 ws2ifsl.sys UAF exploit for Windows 10 19H1 x64 This exploit uses the recently patched use after free vulnerability CVE-2019-1215 in ws2ifsl.sys to achieve local privilege escalation. The exploit targets Windows 10 19H1 1901 x64 and demonstrates how to bypass kASLR, kCFG and SMEP...

dovecot: Dovecot: Arbitrary Code Execution via Sieve editheader use-after-free

A flaw was found in Dovecot. An authenticated attacker can use a Sieve script with the editheader extension to trigger a use-after-free vulnerability in the mail editing code. This can lead to memory corruption, potentially crashing the mail delivery process and allowing for arbitrary code...

CVE-2025-62215_Windows_Kernel_PE

CVE-2025-62215 Exploit PoC Original code credit: https://github.com/dexterm300 🧨 Description This repository contains a proof-of-concept exploit for CVE-2025-62215 , a race condition vulnerability in the Windows kernel that can be triggered via concurrent manipulation of kernel object handles...

xencrypt

Xencrypt PowerShell crypter v 1.0 Authors Xentropy @SamuelAnttila SecForce @SECFORCELTD If you want to read about the design behind this tool and how to make your own crypter, there's an article I wrote about it here: Write a crypter in any language Note Don't be a script kiddie, I made this GPLv...

CVE-2019-11932

CVE-2019-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...

CVE-2018-17182

CVE-2018-17182 Linux kernel VMA-UAF privilege escalation vulnerability CVE-2018-17182 About Google Project Zero cybersecurity researchers have released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel that has been present since kernel versions 3.16...

Updated tor package fixes security vulnerabilities

Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response...

redis-cve-2026-23479-scanner

CVE-2026-23479 Scanner Redis Use-After-Free vulnerability CVE-2026-23479 detection tool. Automatically checks Redis instances for vulnerability, misconfigurations, and exposure risks. Affected Versions Branch| Affected| Fixed ---|---|--- 7.2.x| 7.2.0 - 7.2.13| 7.2.14 7.4.x| 7.4.0 - 7.4.8| 7.4.9...

CVE-2021-40449

CVE-2021-40449 My exploit for CVE-2021-40449, a Windows LPE via a UAF in win32kfull!GreResetDCInternal. short wu along with the UAF vulnerabilty other primitives are being used to make this exploit possible: leaking the exploit's access token address in ring0 via NtQuerySystemInformation function...

launchd-portrep

launchd-portrep launchd-portrep is an exploit for a port replacement vulnerability in launchd, the initial userspace process and service management daemon on macOS. By sending a crafted Mach message to the bootstrap port, launchd can be coerced into deallocating its send right for any Mach port t...

PFQ

PFQ v6.2 Introducción PFQ es un marco funcional diseñado para el sistema operativo Linux, construido para la captura/transmisión eficiente de paquetes 10G, 40G y más, procesamiento funcional en el kernel, bypass del kernel y direccionamiento de paquetes entre grupos de sockets/puntos finales. Est...

CVE-2017-11176

CVE-2017-11176 Prueba de concepto para CVE-2017-11176 para ejecución de código. Vulnerabilidad La función mqnotify en el kernel de Linux hasta la versión 4.11.9 no establece el puntero sock a NULL al entrar en la lógica de reintento. Durante el cierre desde el espacio de usuario de un socket...

CVE-2020-9273

CVE-2020-9273 Estos son los archivos que creé durante el análisis y explotación de CVE-2020-9273 - un use-after-free de heap en ProFTPd. Échale un vistazo al video del exploit aquí. Descripción de los archivos en este repositorio: poc-not-really-v4.c - un artículo y PoC que escribí el año pasado...

CVE-2026-68820-Mitigation-PoC-

CVE-2026-68820: Windows WinSock afd.sys UAF - Mitigation & Detection PoC 📌 Overview This repository contains an educational demonstration of the mitigation for CVE-2026-68820 , a critical Use-After-Free UAF vulnerability in the Windows afd.sys driver. Vulnerability context: The vulnerability allo...

hacker101

Hacker101 Hacker101 es una clase gratuita sobre seguridad web. Ya seas un programador interesado en bug bounties o un profesional de seguridad con experiencia, Hacker101 tiene algo que enseñarte. Primeros pasos Requisitos previos Ruby Sugerencia: usa rbenv bundler Ejecuta gem install bundler, si ...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Non-destructive mass scanner for the NGINX HTTP/3 QUIC use-after-free Inventory which of your hosts are exposed — without ever triggering the bug. ⚠️ Disclaimer This tool is for authorized security testing only — your own infrastructure, or systems you have...

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client

A flaw was found in OpenSSH. A use-after-free vulnerability exists in the ssh client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A...