cve-2021-4034

cve-2021-4034 Easy to use shell implementation of CVE-2021-4034 that was released yesterday. The original C code was sourced from https://github.com/arthepsy/CVE-2021-4034...

CVE-2025-46817-PoC

CVE-2025-46817 Redis Integer Overflow Exploit A lightweight C implementation of the CVE-2025-46817 exploit for Redis integer overflow vulnerability. 🚀 Features Lightweight : Single C file, no external dependencies beyond hiredis Fast : Native compilation for maximum performance Colorful Output :...

CVE-2026-3909

CVE-2026-3909 Chromium Browser PoC This repository contains a proof-of-concept PoC for CVE-2026-3909 that can be reliably triggered in the Chromium browser. Background The official Skia fix for this vulnerability only included a simplified demonstration test case: Official Demo : AtlasOobTest.cpp...

CVE-2021-4034-Rust

CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust. Build instructions Install rust if you haven't already git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build --release Vuln Check check for pkexec which...

fuck_cve_2026_31431

fuckcve202631431 make KERNELVER=uname -r : for LKM sudo insmod fuck-cve-2026-31431.ko regfakeimpl=1 : for builtin sudo insmod fuck-cve-2026-31431.ko...

CVE-2026-4447

CVE-2026-4447 - V8 in Google Chrome prior to Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-03-20 Technical Summary...

ez-pwnkit

ez-pwnkit A pure-Go implementation of the CVE-2021-4034 PwnKit exploit. The exploit use syscall.ForkExec to survive end of main program. Installation git clone https://github.com/OXDBXKXO/ez-pwnkit.git cd ez-pwnkit make As the exploit relies on a malicious shared library, a PWN.so file is generat...

noise-java

Noise-Java Library Noise-Java is a plain Java implementation of the Noise Protocol, intended as a reference implementation. The code is distributed under the terms of the MIT license. This library is written in plain Java, making use of the Java Cryptography Extension JCE to provide cryptographic...

CVE-2023-21823

CVE-2023-21823 Reverse Shell for Windows This repository contains C code that implements a reverse shell for the Windows operating system. A reverse shell allows for remote system control using the command-line, providing the ability to execute commands on the infected machine. Important Using th...

CVE-2019-17662

CVE-2019-17662 Golang implementation of ThinVNC exploit CVE-2019-17662. For educational purposes only. This is meant to be a Golang implementation of the code written by MuirlandOracle found here. Disclaimer This code is meant for Educational and White-Hat purposes only. The author of this...

hibernate-orm

Hibernate ORM is a library providing Object/Relational Mapping ORM support to applications, libraries, and frameworks. It also provides an implementation of the JPA specification, which is the standard Java specification for ORM. This is the repository of its source code: see Hibernate.org for...

o3_finds_cve-2025-37899

based on How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation target vuln ollama vuln CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34 https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34 commit: 2a21363 by using l...

grails3-cve-2022-27772

grails3-cve-2022-27772 The Grails® framework 3.3 application provides custom implementation for TomcatEmbeddedServletContainerFactory which overrides createTempDirectory method implementation. The custom implementation is then used to create EmbeddedServletContainer bean from Application.groovy...

sockstress

sockstress Sockstress CVE-2008-4609 implementation using Go Install go get github.com/marcelki/sockstress Usage Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can choose your unit of time e.g. 1ns,...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of printing in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux

A issue was discovered in the kernel of OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can exploit this to inject arbitrary network packets, regardless of the network configuration...

Astra Linux – Vulnerability in Python 3.7, PHP 7.3

The Keccak XKCP SHA-3 reference implementation, prior to the update of fdc6fef, has an integer overflow and resulting buffer overflow issue. This vulnerability allows attackers to execute arbitrary code or compromise the expected cryptographic properties of the algorithm. This issue occurs within...

ROS-20261005-73-0123

The vulnerability of the fib6nhinit function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

[SECURITY] Fedora 45 Update: createrepo_c-1.2.1-11.fc45

C implementation of Createrepo. A set of utilities createrepoc, mergerepoc, modifyrepoc for generating a common metadata repository from a directory of rpm packages and maintaining it...

CVE-2026-17507

In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malformed input, and it must still decode, since the M...