2382 matches found
CVE-2022-28672
CVE-2022-28672 Discord Server This bug was Use after Free caused by improper handling of javascript object memory references. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Advisory CVE-2022-28672 Demo...
dd
dd Ejecuta contenedores de Linux en macOS — sin VM. ¿Qué es dd? dd ejecuta contenedores de Linux de forma nativa en macOS con Apple Silicon sin una máquina virtual. No hay núcleo de Linux ni hipervisor subyacente: un JIT traduce el código del contenedor y procesa sus llamadas al sistema de Linux ...
Lucky-Spark
LUCKY-SPARK ⟪ LUCKY-SPARK ⟫ es un stager diseñado para cargas útiles de shellcode almacenadas con http/https como Sliver o en GitHub raw. Utiliza métodos modernos de ofuscación y evasión como el descifrado justo a tiempo de ventana deslizante del payload y el parcheo de instrucciones de CPU. Por...
miasm
¿Qué es Miasm? Miasm es un framework de ingeniería inversa gratuito y de código abierto GPLv2. Miasm tiene como objetivo analizar / modificar / generar programas binarios. Aquí hay una lista no exhaustiva de características: Abrir / modificar / generar PE / ELF 32 / 64 LE / BE Ensamblado /...
DotNetHookerToolkit
InjectorCli + ManagedHookHostProj Este repositorio contiene dos proyectos diseñados para ser usados juntos: InjectorCli: Un .NET Framework 4.8 inyector de consola construido sobre frida-clr Frida.dll ManagedHookHostProj: Un .NET Framework 4.8 DLL auxiliar con exportaciones nativas a través de 3F...
CVE20131491-JIT
========================= Title ========================================= CVE-2013-1491 PoC using JIT-Spray by Yuki Chen 古河 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Twitter: @guhe120 Weibo: http://weibo.com/u/1874932054 ========================= About this PoC...
LiveContainer
LiveContainer An app launcher that runs iOS apps without actually installing them! Crowdin Project: | Documentation:liveconainer.github.io LiveContainer LiveContainer is an app launcher not emulator or hypervisor that allows you to run iOS apps inside it. Allows you to install unlimited apps 3...
CVE-2024-29943
CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE. This repository contains PoC, Exploit and Analysis Slides for CVE-2024-29943. Demo Demo.mp4 Slides Slides.pdf Reproduce Information Github Git Commit:...
CVE-2025-43529
CVE-2025-43529 TL; DR Apple recently shipped iOS 26.2 and iPadOS 26.2, along with a security advisory that includes fixes for WebKit vulnerabilities. One bug in the DFG JIT compiler CVE-2025-43529 stood out, so I decided to dig into it. The JIT compiler correctly recognized that a Phi node where...
unicorn
Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...
CVE-2026-89581
CVE-2026-89581 is a Linux kernel BPF x86 backend bug where the REX prefix is incorrectly built with add_1mod() (setting REX.B) instead of add_2mod() (setting REX.R) when encoding per-CPU address MOV instructions targeting extended registers (R5, R7, R8, R9). The lost high register bit causes reso...
CVE-2026-2766-but-with-wasm
CVE-2026-2766, but with wasm Status: validated crash PoC with demonstrated control-flow hijack crashpc = freed-cell poison 0xcdcdcdcdcdcdcdcd under the debug shell — the engine jumps to a pointer read out of the freed ICScript. Remaining work: control the reclaimed bytes. See research/README.md. ...
CVE-2026-2764-but-with-wasm
CVE-2026-2764, but with wasm Status: analysis + validated PoC. Primitive weaponization in progress. A WasmBlazeFox-style chain built on a 2026 bug this time: CVE-2026-2764, an IonMonkey/baseline "JIT miscompilation + use-after-free" in the JavaScript Engine: JIT component, fixed in Firefox 148 MF...
CVE-2024-29943-but-with-wasm
CVE-2024-29943, but with wasm An end-to-end exploit chain for CVE-2024-29943 that achieves arbitrary native code execution by smuggling shellcode into SpiderMonkey's WebAssembly JIT code page as f64.const immediates — no ROP, no VirtualProtect, no external toolchain. Verified working against the...
CVE-2022-28672
CVE-2022-28672 CVE-2022-28672 Vulnerabilidad Foxit PDF Reader - UaF - RCE - JIT Spraying IOC de omisión de autenticación de FortiOS, FortiProxy y FortiSwitchManager CVE-2022-40684 Introducción El reciente CVE FortiOS / FortiProxy / FortiSwitchManager ha sido explotado en la naturaleza. Nos gustar...
CVE-2018-17463
CVE-2018-17463 完成了一个针对CVE-2018-17463的可工作利用，纯粹为了好玩。 我找到的关于此漏洞的原始文章在此 http://phrack.org/papers/jitexploitation.html。我只是想把这个任意读写变成完整的可利用漏洞。 此外，我还从以下论文中学习了JIT spray技术，这是一篇有趣的读物。 root@kitploit: @inproceedingsgawlik2018sok, title=Sok: Make jit-spray great again, author=Gawlik, Robert and Holz, Thorsten...
CVE-2026-89156
A flaw was found in PCRE2. An attacker can provide invalid UTF Unicode Transformation Format data, leading to an out-of-bounds read during a Just-In-Time JIT fallback. This vulnerability could potentially result in a denial of service. Mitigation Mitigation for this issue is either not available ...
CVE-2026-89161
A flaw was found in PCRE2, a library for processing regular expressions. The pcre2jitmatch function, which handles just-in-time JIT compilation for regular expressions, incorrectly manages memory when processing certain inputs. This memory corruption vulnerability could allow a local attacker to...
