poc-CVE-2025-38352

漏洞详情 本仓库仅包含触发该漏洞的概念验证代码。 我已为此漏洞编写了一个完整的利用程序。你可以在下面的链接中找到详细信息。 https://github.com/farazsth98/chronomaly 分析博客文章 第1部分 - https://faith2dxy.xyz/2025-12-22/cve202538352analysis/ 第2部分 - https://faith2dxy.xyz/2025-12-24/cve202538352analysispart2/ 演示 PoC 说明 PoC 很大程度上依赖于 getpid 系统调用消耗的 CPU 时间。 为此，我尽量使 PoC...

XAMPP 8.2.4 - Unquoted Path Vulnerability

Exploit Title: XAMPP 8.2.4 - Unquoted Path Exploit Author: Andrey Stoykov Version: 8.2.4 Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.2.4/xampp-windows-x64-8.2.4-0-VS16-installer.exe Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com/ Steps to...

CVE-2018-14739

An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbcpatternsetdefault in pattern.c...

Apache 2.4.7 + PHP 7.0.2 - openssl_seal() Uninitialized Memory Code Execution

Apache 2.4.7 + PHP 7.0.2 - opensslseal Uninitialized Memory Code Execution ?php // Source: http://akat1.pl/?id=1 function getmaps $fh = fopen"/proc/self/maps", "r"; $maps = fread$fh, 331337; fclose$fh; return explode"\n", $maps; function findmap$sym $addr = 0; foreachgetmaps as $record if...