CVE-2014-7911

CVE-2014-7911 POC for CVE-2014-7911 for Nexus5 Android 4.4.4r1 based on retme7, use different rop chain Info http://ele7enxxh.com/CVE-2014-7911-Detailed-Analysis-Of-Android-Local-Privilege-Escalation-To-System-Vulnerability.html Usage connect your phone via adb root@kitploit: adb push jni/expolit...

CVE-2016-2334

Exploiting CVE-2016-2334 7zip HFS+ vulnerability hfsGenerator.py Script used to generate HFS+ file heap.js WinDbg js script. After loading script, setup allocation hook in the following way: bp ntdll!RtlAllocateHeap "pt "dx Debugger.State.Scripts.heap.Contents.handleRtlHeapAlloc;g"" Next you can...

CVE-2022-25636

CVE-2022-25636 This is my exploit for CVE-2022-25636. I tested it against Ubuntu 21.10 with kernel 5.13.0-30. Works about 40% of the time, in the other cases you likely get a kernel panic. The exploit might corrupt important data on heap, after an unsuccessful attempt it's best to reboot...

CVE-2016-0040

CVE-2016-0040 This exploit builds upon SMMRootkit's 32Bit project https://github.com/Rootkitsmm/cve-2016-0040 which causes this vulnerability to trigger a BSoD with all 'a's in RCX and 'B's in RAX. It was ported to 64Bit Windows 7 SP1 and doesn't use the "mov rcx+06h, rax" instruction for inital...

ROOT-OS-DEBIAN-11-CVE-2026-73076 CVE-2026-73076 in vim - Patched by Root

Root has patched CVE-2026-73076 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-73072 CVE-2026-73072 in vim - Patched by Root

Root has patched CVE-2026-73072 in the vim package for Root:Debian:11. Multiple fixed versions available...

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution RCE and gain practical experience in exploitatio...

CVE-2026-38422

CVE-2026-38422: Remote Code Execution via Combined Buffer Overflows in Tasmota fetchjpg CVE: CVE-2026-38422 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg Author: Saidakbarxon Maxsudxonov...

CVE-2026-38426

CVE-2026-38426: strcpy Stack Buffer Overflow in Tasmota fetchjpg boundary40 CVE: CVE-2026-38426 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 0 initial connection Author: Saidakbarxon...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

CVE-2024-38063-poc

Real POC published https://github.com/ynwarcs/CVE-2024-38063 and I have updated in my code as well, This can cause crash into your system so use VM or just learning thing, you can get RCE by making changes in the code. Usage iface Most probably this is enabled bydefault. Check the...

CVE-2026-55200

🚨 CVE-2026-55200 - Critical libssh2 Out-of-Bounds Write Vulnerability 📌 Overview CVE-2026-55200 is a critical memory corruption vulnerability affecting the widely deployed libssh2 library. The flaw arises from improper validation of the SSH packet length field during packet processing, potentiall...

CVE-2025-10585-The-Chrome-V8-Zero-Day

CVE-2025-10585: Zero-Day в Chrome V8, который нужно исправить сегодня ⚔️🛡️ Google на этой неделе выпустила внеочередной патч для CVE-2025-10585 , серьезной уязвимости тип-путаницы type-confusion в движке V8 JavaScript / WebAssembly браузера Chrome. Эта ошибка не теоретическая — Группа анализа угроз...

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

CVE-2025-31200 および CVE-2025-31201 | iMessage ゼロクリック RCE チェーン 概要 このリポジトリは、iOS 18.x 以降に影響を与えるゼロクリックリモートエクスプロイトチェーンに関する研究を文書化しています。iMessage を介して配信される不正な AMR オーディオファイルが以下を引き起こします: 1. CoreAudio のヒープ破壊 CVE-2025-31200 — AudioConverterService AMR 12.2 デコードにおける、有効な FT=7 フレーム全体に埋め込まれた不正なビットストリームパラメータによる。 2...

CVE-2025-0690

CVE-2025-0690: Integer Overflow Vulnerability in GRUB2 🛡️ Overview CVE-2025-0690 is a critical integer overflow vulnerability in the GRUB2 boot loader, allowing arbitrary code execution and Secure Boot bypass. This flaw affects systems that rely on GRUB2 for secure boot, exposing the system before...

servu-cve-2026-28318-poc

CVE-2026-28318 — SolarWinds Serv-U "Content-Encoding: deflate" crash pre-autenticazione Analisi della causa principale + proof-of-concept DoS. L'avviso pubblico classifica la vulnerabilità come un denial-of-service / consumo di risorse non controllato non autenticato. L'analisi binaria mostra che...

CVE-2026-45447

🚨 CVE-2026-45447 - Vulnerabilità Use-After-Free Critica di OpenSSL Use-After-Free nell'heap in PKCS7verify che causa corruzione della memoria, crash e potenziale esecuzione remota di codice. 📖 Riepilogo Esecutivo CVE-2026-45447 è una vulnerabilità critica nella funzionalità di verifica PKCS7 di...

CVE-2024-38063-Medium

Ini adalah poc agak tidak stabil untuk CVE-2024-38063, RCE di tcpip.sys yang ditambal pada 13 Agustus 2024. persyaratan root@kitploit: pip3 install scapy penggunaan Ubah bidang dalam skrip: iface - Jika Anda memiliki beberapa adaptor, Anda harus memilih mana yang akan digunakan untuk mengirim...

CVE-2019-11933

CVE-2019-11933 Corruzione dell'heap nel selettore multimediale di WhatsApp che colpisce WhatsApp per Android precedente alla versione 2.19.291 Contesto Un file GIF è diviso in segmenti, contrassegnati da un byte specifico: Immagine 0x2C La sezione immagine descrive un singolo fotogramma nel file...

CVE-2021-30573

CVE 2021-30573 Vulnerabilità di Google Chrome CVE-2021-30573 Use after free nella GPU di Google Chrome ha permesso a un attaccante remoto di sfruttare potenzialmente la corruzione dell'heap tramite una pagina HTML appositamente predisposta. CVE-2021-30573 Dettaglio Versioni vulnerabili : Il bug...