622 matches found
cfgrip
cfgrip PE/ELF x86/x64 CFG extractor. Takes a binary in, disassembles it, resolves every jump and call GOT, jump tables, register tracing, and exports the full control flow graph as structured JSON. why You need to know exactly where every branch goes. Not for reading — for patching. Feed the JSON...
BasicHook
BasicHook Hooks functions using 32-bit relative jump, writing is done atomically to avoid race conditions. Uses hde32 from instruction length disassembly...
Byepervisor
Byepervisor Summary PS5 hypervisor exploit for = 2.xx firmware. Two vulnerabilities and exploit chains are contained in the repo, they are independent of each other and either can be used. One exploit is provided mainly just for preservation /oldjumptableexploit, only the primary exploit chain...
CVE-2015-8710
Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...
Jump-over-ASLR-BTB
Branch Predictors & ASLR Author: Byte Reaper Description This repository contains research C implementation that demonstrates concepts related to branch predictors, speculative execution, and cache-based side channels in the context of address space layout randomization ASLR. Requirements : Linux...
CVE-2026-1801C
This repository does not have a README...
CVE-2024-44083
CVE-2024-44083 the original PoC repos got deleted github.com/Azvanzed/CVE-2024-44083, github.com/Azvanzed/IdaMeme so here it is. figured id recreate it for anyone who wants to understand how it works or test their setup. IDA Pro ≤ 8.4 crashes when analyzing binaries with excessive jump chains. th...
portia
⚠️ NOTE: This tool is no longer under active maintenance. portia Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised Privilege escalation Lateral movement Convenience modules Portia is a genus o...
zyrox
Zyrox LLVM Obfuscator llvm compile and link-time plugin for obfuscating native code Why why not ¯\ツ/¯ One of my biggest projects, where I learned a lot about LLVM internals, binary formats, assembly and obfuscation techniques. I believe that learning through building is the best way to learn, thu...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam. When both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y are enabled, disabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...
CVE-2026-97370
A flaw was found in Junrar. The RAR virtual machine RarVM fails to properly enforce execution limits when handling jump instructions that target addresses beyond the program boundaries. A remote attacker could provide a specially crafted RAR archive to force the extraction process into an infinit...
CVE-2020-37288
A flaw was found in Vyper. A remote attacker can cause a Denial of Service DoS against affected smart contracts by submitting transactions that invoke specific contract functions. Due to incorrect bytecode generation for return statements located inside loops within nested internal calls, the...
CLEANSTART-2025-SH71906 Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm
Security vulnerability affects the imagemagick package. Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm...
CLEANSTART-2024-ST78249 Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code
Security vulnerability affects the firefox package. Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code...
CLSA-2026-1792795786 Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
SECURITY UPDATE: out-of-bounds repeat stack access in Onigmo - debian/patches/CVE-2026-110264.patch: reject patterns whose range-repeat or null-check count overflows the internal ID type in include/ruby/onigmo.h, regcomp.c, regerror.c. - CVE-2026-110264 SECURITY UPDATE: wrapped jump offsets in...
CLSA-2026-1792795609 Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
SECURITY UPDATE: out-of-bounds repeat stack access in regexps - debian/patches/CVE-2026-110264.patch: reject patterns whose range-repeat or null-check count overflows the ID type in regcomp.c - CVE-2026-110264 SECURITY UPDATE: wrapped jump offsets in compiled regexps -...
CLSA-2026-1792795468 Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
SECURITY UPDATE: out-of-bounds repeat stack access in huge regexps - debian/patches/CVE-2026-110264.patch: reject patterns whose range repeat or null check IDs overflow in regcomp.c, regerror.c. - CVE-2026-110264 SECURITY UPDATE: wrapped jump offsets in the regexp compiler -...
CVE-2020-37288
Vyper versions 0.1.0b10 before 0.2.3 are vulnerable to an invalid jump destination caused by a stack underflow . This occurs when a return statement is used inside a for loop within an internal function that is called two or more internal calls deep. The compiler generates incorrect code for thes...
CVE-2020-37288 Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops
Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an invalid jump destination stack underflow. Affected contracts revert such calls unnecessarily, which in limited...
CVE-2020-37288 Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops
Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an invalid jump destination stack underflow. Affected contracts revert such calls unnecessarily, which in limited...