GhostKatz

GhostKatz Extract LSASS credentials directly from physical memory by abusing signed vulnerable drivers with physical memory read primitives via MmMapIoSpace, bypassing traditional user-mode detection capabilities. This tool was developed in collaboration between Julian Peña and Eric Esquivel. Thi...

CVE-2026-99275

A flaw was found in the Linux kernel's SMB Server Message Block client. A malicious SMB server can exploit this vulnerability to trigger an out-of-bounds memory read, leading to sensitive information disclosure. Due to missing packet length checks on truncated session setup responses, the client...

CVE-2026-99272

A flaw was found in the Linux kernel's Server Message Block SMB client. The SMB2 read handler does not properly validate whether the data range specified by the server fits within the boundaries of the received packet. A malicious SMB server could exploit this vulnerability by sending a crafted...

CVE-2026-99274

A flaw was found in the Linux kernel's SMB client. When handling file extent mapping fiemap requests, the client improperly validates empty truncated responses from the server. A malicious SMB server can exploit this vulnerability by returning a specially crafted response, triggering an...

CVE-2014-0160

💔 CVE-2014-0160 — "Heartbleed" 📖 Table of Contents Overview Technical Background Root Cause Impact Affected Versions Exploitation Overview Mitigation & Patch Timeline Lessons Learned Summary 🔎 Overview Heartbleed is the nickname for CVE-2014-0160 , a severe vulnerability in OpenSSL’s TLS heartbea...

CVE-2025-67246

CVE-2025-67246 Vulnerability Title :LuDaShi Incorrect Access Control Affected versions :Less than 6.1026.4505.112 Discovery time :December 2, 2025 Discoverer :ZhouRui Analysis Report : LuDaShi is a well-known free system utility software that provides free hardware authentication, computer mobile...

CVE-2021-28476

CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

EXP-CVE-2017-75

EXP-CVE-2017-75 This Python script is designed to check for and exploit a specific vulnerability in NGINX servers referred to as CVE-2017-75. This was developed for a public vulnerability disclosure program, I recently submitted a report to. It uses a crafted Range header to potentially trigger a...

EUVD-2026-118439

GPAC through 26.07.0 contains a type confusion vulnerability in drawablegetaspect2dmpeg4 and TraverseShape that casts a Shape's appearance node to MAppearance without checking its node tag. Attackers can supply a crafted XMT file placing another node type, such as Conditional, in the appearance...

CVE-2026-119924

An out-of-bounds read vulnerability exists in the TDS RPC procedure-name parser within the Babelfish for PostgreSQL extension and Amazon Aurora PostgreSQL with Babelfish . The flaw occurs when processing a malformed TDS RPC request sent to the TDS port (default 1433). This could allow remote auth...

EUVD-2026-118419

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

CVE-2026-119924 Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

CVE-2026-119924 Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

CVE-2020-8277

CVE-2020-8277 For educational purposes only. Quick Run clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version If you use fixed...

CVE-2026-120060

A flaw was found in psqlODBC. The driver improperly validates lengths and counts received from the database server across multiple data handling operations. A malicious or compromised server can exploit this vulnerability by returning crafted responses to a connecting client. Successful...

CVE-2024-5633

PoC for CVE-2024-5633 Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports. An attacker with a knowledge of the available commands...

CVE-2026-92693

A flaw was found in FastNetMon. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS or potentially disclose memory contents. By sending a crafted network packet record containing a truncated IPv6 fragment header, an attacker triggers an out-of-bounds memo...

CVE-2026-92698

A flaw was found in FastNetMon. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted sFlow packet with an inflated header size. Because the application fails to properly validate the header length against the received packet buffer, processing the packe...

CVE-2026-77372

A flaw was found in VeraCrypt. The deserialization routines responsible for processing messages sent from unprivileged user interfaces to the elevated root service fail to properly validate data lengths and element counts. A local attacker can exploit this flaw by sending specially crafted...