cve-2012-1889

heapspray Wie man präzises Heap-Spraying durchführt demo Praktische Demonstration...

CVE-2024-6387

CVE-2024-6387 CVE-2024-6387 è un esempio ipotetico, ma supponiamo che sia una vulnerabilità reale nell'implementazione del server OpenSSH. Questa vulnerabilità potrebbe coinvolgere un problema di buffer overflow o corruzione della memoria che consente a un attaccante remoto di eseguire codice...

MS17-010

MS17-010 Dieses Repository ist für meine öffentliche Arbeit zu MS17-010 gedacht. Ich habe nicht vor, irgendeinen Support zu leisten. Auf alle Supportanfragen werde ich nicht antworten. Dateien BUG.txt Details zum MS17-010-Fehler und einige Analysen checker.py Skript zum Auffinden zugänglicher Nam...

Python-precise-heap-spraying-

Python-precise-heap-spraying- Heap spraying preciso in Python 0c0c0c0c...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Execução Remota de Código via Use-After-Free em JScript.dll CVE-2025-30397 🧠 Descrição Este repositório contém um exploit de prova de conceito PoC para uma vulnerabilidade Use-After-Free no mecanismo JScript jscript.dll que afeta o...

CVE-2010-2883

CVE-2010-2883 PoC per CVE-2010-2883 che utilizza ricerca TTD, tecniche Metasploit, BOF+ROP e HEAP spraying, solo a scopo didattico...

Exploit for CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Heartbleed's...

Classic-Heap-Attacks-POCs-Windows-10

Pruebas de concepto contra el heap de Windows En este reposit...

Exploit for Use of Uninitialized Resource in Microsoft

Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...

Exploit for Use of Uninitialized Resource in Microsoft

Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...

Exploit for Out-of-bounds Write in Adobe Acrobat

CVE-2010-2883 PoC for CVE...

Exploit for Use of Uninitialized Resource in Vmware Fusion

This is a VMware Escape Exploit, a proof-of-concept PoC exploit for CVE-2017-4905, targeting VMware WorkStation 12.5.5 and earlier versions. The exploit is designed to escape the VMware environment and execute arbitrary code on the host system. The exploit is written in C and uses a heap...

AutoBlue-MS17-010

This is a semi-automated, fully working, no-bs, non-metasploit version of the public exploit code for MS17-010. The exploit is designed to target Windows systems vulnerable to the EternalBlue vulnerability, which is a remote code execution RCE vulnerability in the SMBv1 protocol. The exploit code...

Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)

!/usr/bin/env python3 Exploit Title: Microsoft Windows Server 2025 JScript Engine - Remote Code Execution RCE Exploit Author: Mohammed Idrees Banyamer Instagram: @@banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-05-31 CVE: CVE-2025-30397 Vendor: Microsoft Affected Versions: Windo...

Exploit for Type Confusion in Microsoft

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Fre...

Exploit for Type Confusion in Google Chrome

Chrome Renderer 1day RCE via Type Confusion in Async Stack Tra...

Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel

Details have emerged about a recently patched critical remote code execution vulnerability in the V8 JavaScript and WebAssembly engine used in Google Chrome and Chromium-based browsers. The issue relates to a case of use-after-free in the instruction optimization component, successful exploitatio...

Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass

Posted by Samuel Groß, Project Zero This post is the second in a series about a remote, interactionless iPhone exploit over iMessage.The first blog post, which introduced the exploited vulnerability, can be found here. The initial primitive gained from the vulnerability is an absolute address...

Analyzing an exploit for СVE-2017-11826

The latest Patch Tuesday 17 October brought patches for 62 vulnerabilities, including one that fixed СVE-2017-11826 – a critical zero-day vulnerability used to launch targeted attacks – in all versions of Microsoft Office. The exploit for this vulnerability is an RTF document containing a DOCX...

IE browser vulnerability integrated use of technology: the heap spray techniques-vulnerability warning-the black bar safety net

The browser was once the vulnerabilities wreak havoc on the hardest-hit areas, in the IE6 era often accidentally open a page will be caught. Even in the web the penetration circles also spread through the“Get shell hanging horse”such a word. Then this is the case when is a difference? I personall...