CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white-hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, assigned CVE-2017-16995. This...

KslDump

KslDump - BMVD Bring the Microsoft Vulnerable Driver Important context I reported the issue to Microsoft on 7 March 2026. However, almost 20 days earlier, the game-hacking community had already reversed and publicly discussed it. From my side, I do not follow their projects and I was not aware of...

CVE-2022-22077

✅ CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...

kur

kur A code simply offers the ability to kernel-mode read / write memory from user-mode using vulnerable signed driver. It's simply utilizing MmCopyVirtualMemory, which is undocumented yet one of the most common API, in kernel mode so you can read / write any user-mode memory without having to wor...

CVE-2023-20564

CVE-2023-20564 - AMD Ryzen Master Driver Physical Memory Access PoC Overview This repository contains a Proof of Concept PoC demonstrating the vulnerability CVE-2023-20564 in AMD Ryzen Master Driver. The vulnerability allows unprivileged users to read and write arbitrary physical memory, leading ...

SIOCtl

SIOCtl Simple IOCTL dispatcher This is a generic IOCTL "dispatcher". I made this to be used as a POC for CVE 2018-8060 and 2018-8061, but it can be used to any device, IOCTL and data, thought. Input data is a binary file, containing raw data to be used as input buffer in IO control. Output data i...

HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC PoC exploit for HP Hardware Diagnostic's EtdSupp driver CVE-2023-32673/PSR-2022-0209 Building Open in Visual Studio 2019 Build in release Admire or don't Summary Pretty simple little driver with virtual memory r/w, no MmMapIoSpace, etc. Disclaimer Diet soda is disgusting...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Arbitrary physical memory and I/O port read/write via ThrottleStop driver ThrottleStop is a small legitimate application used to monitor and correct CPU throttling. It has a driver that faciliates these tasks and it mostly doesn't have any sort of input validation...

CVE-2025-49844

🚨 CVE-2025-49844 RediShell - Complete Guide ⚠️ Just for Learning, Not Hacking ; ⚠️ Hey! This is a simple tool I made to help people check if their Redis servers are vulnerable to the bug. It's not meant for actual attacks - just for learning and protecting your own stuff. What's This All About?...

throttlestop-exploit-rw

Physical Memory Mapper Research tool demonstrating physical memory access through virtual-to-physical address translation combined with vulnerable driver exploitation. Overview This project explores low-level Windows memory management by combining the superfetch technique for address translation...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Arbitrary physical memory and I/O port read/write via ThrottleStop driver ThrottleStop is a small legitimate application used to monitor and correct CPU throttling. It has a driver that faciliates these tasks and it mostly doesn't have any sort of input validation...

Stryker

Stryker Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303 System Requirements x64 Windows 7/8/8.1/10; Stryker designed only for x64 Windows; Administrative privilege is required. Features Driver Signature Enforcement Overrider similar to DSEFIx; Protected Processes Hijacking via...

CVE-2025-7771-Vulnerability-Exploration

🔓 ThrottleStop.sys Kernel Exploit — HVCI-Compatible Physical Memory Mapper CVE-2025-7771 — Arbitrary Physical Memory Read/Write via ThrottleStop.sys IOCTLs ⚠️ Disclaimer This project is published for educational and research purposes only. The goal is to demonstrate how a signed, trusted kernel...

CVE-2026-99999

CVE-2026-99999 — PwnEscape: detection and mitigation Practical guide in Spanish to determine whether a Linux server is exposed to CVE-2026-99999 "PwnEscape" and how to mitigate it. Includes a script that checks the machine and gives a verdict with the reason. 📋 Summary Field| Value ---|--- CVE|...

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE This exploit rebuilds and exploit the CVE-2019-16098 which is in driver Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. Instead of hardcoded base...

CVE-2025-8061-Exploit

CVE-2025-8061 Exploit Overview Proof-of-Concept exploit for LnvMSRIO.sys Lenovo MSR I/O Driver, demonstrating arbitrary physical memory read/write and kernel memory access via Superfetch VA-to-PA translation. Driver Information Property| Value ---|--- Driver Name| LnvMSRIO.sys Device Name|...

cheat-engine-undetectable

Cheat Engine Undetectable Academic Research Edition — Modified Cheat Engine with multi-tiered anti-cheat evasion for cybersecurity education and university-level reverse engineering research. Disclaimer: This project is exclusively for academic research, university coursework, and cybersecurity...

webkit2gtk3 security, bug fix, and enhancement update

An update is available for webkit2gtk3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

RLSA-2026:98455 Critical: webkit2gtk3 security, bug fix, and enhancement update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia CVE-2023-4860 chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...