23354 matches found
CVE-2026-33317
CVE-2026-33317 OP-TEE PKCS11 PoC This repository contains the Normal World proof of concept, reproduction notes, and captured logs for CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. The official OP-TEE advisory describes missing validation in entrygetattributevalue for PKCS11CMDGETATTRIBUTEVALUE. The bug...
CVE-2025-46817
CVE-2025-46817 – Redis Lua unpack Integer Overflow Potential RCE Redis Lua unpack integer overflow PoC causing stack blow-up and crash on 8.2.1. Overview Redis 8.2.1 ships Lua 5.1 with an unpack implementation that computes the result count using signed integers. Carefully chosen start/end indice...
CVE-2020-16947
CVE-2020-16947 This vulnerability occurs in Outlook 2019 16.0.13231.20262 installed on Windows 10 1909 x64 TLDR; I found this bug using winafl fuzzer. This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. Details 0:00...
CVE-2024-38063
This is a rather flaky poc for CVE-2024-38063, a RCE in tcpip.sys patched on August 13th 2024. I didn't find and report this vuln, that would be Wei. requirements pip3 install scapy usage Modify the fields in the script: iface - If you have multiple adapters, you need to choose which one to use t...
CVE-2021-30573
CVE 2021-30573 Google Chrome Vulnerabilities CVE-2021-30573 Use after free in GPU in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30573 Detail Vulnerable versions : The bug works in Google Chrome 91 or lower. It is patched in 92+...
CVE-2016-3308
Use CVE-2016-3308 corrupt win32k desktop heap author : @55-AA, Sept 18, 2016 Introduction Desktop heap is a kernel pool used by win32k, it can be exploited by user-mode application. Here I will describe in detail how to implement a reliable exploitation so that to read/write arbitrary address in...
CVE-2014-7911
CVE-2014-7911 POC for CVE-2014-7911 for Nexus5 Android 4.4.4r1 based on retme7, use different rop chain Info http://ele7enxxh.com/CVE-2014-7911-Detailed-Analysis-Of-Android-Local-Privilege-Escalation-To-System-Vulnerability.html Usage connect your phone via adb adb push jni/expolit /data/local/tm...
CVE-2024-26817-amdkfd
-- CVE-2024-26817 I found a security vulnerability in AMD KFD in the following file drivers/gpu/drm/amd/amdkfd/kfdchardev.c, the ioctl identifier is AMDKFDIOCGETPROCESSAPERTURESNEW. In the function kfdioctlgetprocessaperturesnew, the user-provided data of args-numofnodes will be multiplied and...
CVE-2023-21716
CVE-2023-21716 — Microsoft Word RTF fonttbl Heap Corruption RCE Severity: Critical CVSS 9.8 Affected: Microsoft Word 2013 / 2016 / 2019 / 2021 unpatched Patch: Microsoft February 2023 Patch Tuesday Author: REGGYRAIDER Vulnerability Overview CVE-2023-21716 is a heap corruption vulnerability in...
CVE-2025-10585-The-Chrome-V8-Zero-Day
CVE-2025-10585: The Chrome V8 Zero-Day You Need to Patch Today ⚔️🛡️ Google has released an out-of-band patch this week for CVE-2025-10585 , a serious type-confusion vulnerability in Chrome’s V8 JavaScript / WebAssembly engine. The bug is not theoretical — Google’s Threat Analysis Group confirmed...
CVE-2026-65349
CVE-2026-65349 — getattrlist OOB Write in vfsattrpackinternal Component: XNU VFS — vfsattrpackinternal getattrlist syscall Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds write to caller buffer Impact: Kernel heap corruption; from kernel conte...
CVE-2026-25243
CVE-2026-25243 — Redis RESTORE double-free → remote code execution Verified against Rocky Linux 8.10, aarch64, Redis 8.6.2, jemalloc 5.3.0. Reference: https://www.zeroday.cloud/blog/redis-cve-2026-25243-deep-dive TLDR; Stable exploit, works against variety of OS distro and architecture. Executive...
CVE-2023-21716
CVE-2023-21716 Microsoft Word RTF Font Table Heap Corruption https://twitter.com/jduck A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as a...
iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201
CVE-2025-31200 & CVE-2025-31201 | iMessage Zero-Click RCE Chain Summary This repository documents research into a zero-click remote exploit chain affecting iOS 18.x and beyond. A malformed AMR audio file delivered via iMessage triggers: 1. Heap corruption in CoreAudio CVE-2025-31200 — in...
CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough
CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution RCE and gain practical experience in exploitatio...
CVE-2026-45447
🚨 CVE-2026-45447 - Critical OpenSSL Use-After-Free Vulnerability Heap Use-After-Free in PKCS7verify allowing memory corruption, crashes, and potential remote code execution. 📖 Executive Summary CVE-2026-45447 is a critical vulnerability in OpenSSL's PKCS7 verification functionality. The flaw exis...
CVE-2024-38063-poc
Real POC published https://github.com/ynwarcs/CVE-2024-38063 and I have updated in my code as well, This can cause crash into your system so use VM or just learning thing, you can get RCE by making changes in the code. Usage iface Most probably this is enabled bydefault. Check the...
CVE-2016-2334
Exploiting CVE-2016-2334 7zip HFS+ vulnerability hfsGenerator.py Script used to generate HFS+ file heap.js WinDbg js script. After loading script, setup allocation hook in the following way: bp ntdll!RtlAllocateHeap "pt "dx Debugger.State.Scripts.heap.Contents.handleRtlHeapAlloc;g"" Next you can...
CVE-2026-38422
CVE-2026-38422: Remote Code Execution via Combined Buffer Overflows in Tasmota fetchjpg CVE: CVE-2026-38422 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg Author: Saidakbarxon Maxsudxonov...