razer-lycosa-kernel-lpe-BYOVD-Vulnerability-PoC

Lycosa.sys, Razer: two kernel vulnerabilities reachable by any local user Discovered through https://github.com/416rehman/DeepZero Vendor: Razer Inc. Component: Lycosa.sys, the Razer Lycosa keyboard filter driver, x64 SHA-256: a120a6184ab16864e8a5f1dfd0cd178fca541de463b5cef946e18c34b9b6f716...

vaas-cve-2014-0160

Vulnerabilidad como Servicio - CVE 2014-0160 Un sistema Linux Debian Wheezy con una versión vulnerable de libssl y openssl y un servidor web para mostrar CVS-2014-0160, también conocido como Heartbleed. Resumen Este contenedor Docker está basado en Debian Jessie y ha sido modificado para usar una...

WebKit-CVE-2016-4622

Análisis de WebKit CVE-2016-4622: Inmersión Profunda en la Vulnerabilidad del Slice ValueOf Fastpath Análisis completo y explotación de la vulnerabilidad del núcleo JavaScript de WebKit que permite la divulgación de memoria mediante la manipulación de Array.slice Tabla de Contenidos Resumen...

CVE-2025-5777

CVE-2025-5777 - Exploit de Fuga de Memoria de Citrix NetScaler 📌 Resumen Esta herramienta demuestra la CVE-2025-5777 , una vulnerabilidad crítica de divulgación de memoria en dispositivos Citrix NetScaler ADC/Gateway. El exploit filtra contenidos sensibles de memoria a través de solicitudes de...

Ticketbleed

Ticketbleed Esta herramienta es para explotar la vulnerabilidad Ticketbleed CVE-2016-9244, la biblioteca Ticketbleed dentro de la carpeta src es una versión modificada de crypto/tls de go, tiene algunos cambios dentro de los archivos handshakeclient.go, tls.go, common.go pero es casi igual...

CVE-2026-13326

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

EUVD-2026-75974

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

CVE-2026-13326 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

CVE-2026-13326

CVE-2026-13326 affects Qt NFC 's QNdefNfcTextRecord component, where an out-of-bounds read in language code length parsing (combined with an integer underflow) allows a physically proximate attacker to trigger a denial of service or limited memory disclosure via a crafted NFC tag. The CVSS 4.0 sc...

CVE-2017-7529-

CVE-2017-7529-Desbordamiento de Entero en el Encabezado Range de Nginx Nginx es un servidor web de alto rendimiento y un servidor proxy inverso, de caché, etc., ampliamente utilizado. En versiones de Nginx 1.13.2 e inferiores, existe una vulnerabilidad de desbordamiento de enteros que permite a u...

CVE-2026-88914 Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

EUVD-2026-75879

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

PT-2026-89741

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

PT-2026-90240

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6kl cfg80211 connect event subtracts fixed IE offsets from assoc req len -= 4 and assoc resp len -= 6, both u8, with no lower bound. The aggregat...

PT-2026-90242

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the parsed chunk list. xdr count read segments checks only 4-byte...

heartbleed

heartbleed Una herramienta simple escrita en Ruby que permite probar tus servidores para la vulnerabilidad OpenSSL CVE-2014-0160. Descargo de responsabilidad No me haré responsable por los daños que puedan causarse utilizando esta herramienta. Fue escrita para verificar servidores privados para u...

ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`

A flaw was found in ws, an open source WebSocket client and server for Node.js. The websocket.close implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memor...

CVE-2026-3055

🔥 NetScalerBleed2: Critical Unauth Memory Overread in Citrix NetScaler CVE-2026-3055 Unauthenticated Out-of-Bounds Memory Read Memory Leak Only on appliances configured as SAML Identity Provider IdP 📋 Overview CVE-2026-3055 is a critical out-of-bounds read vulnerability CWE-125 in Citrix NetScale...

CVE-2026-16172

CVE-2026-16172 affects the Endpoint DLP (EPDLP) service of the Netskope Client , where an out-of-bounds heap read occurs due to a missing bounds check on a specially crafted message. A local standard user can trigger the flaw, causing the kernel driver handler to crash and potentially interruptin...