cheat-engine-undetectable

Cheat Engine Undetectable Academic Research Edition — Modified Cheat Engine with multi-tiered anti-cheat evasion for cybersecurity education and university-level reverse engineering research. Disclaimer: This project is exclusively for academic research, university coursework, and cybersecurity...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

CVE-2026-98824

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When processing transmission TX status reports, the subsystem fails to properly validate rate metadata before using it to index internal rate tables. Malformed metadata can trigger an out-of-bounds memory access, potentially...

HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC PoC exploit for HP Hardware Diagnostic's EtdSupp driver CVE-2023-32673/PSR-2022-0209 Building Open in Visual Studio 2019 Build in release Admire or don't Summary Pretty simple little driver with virtual memory r/w, no MmMapIoSpace, etc. Disclaimer Diet soda is disgusting...

CVE-2026-98799

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program attached to a trampoline is detached while another task is paused in an active routine, the kernel can prematurely release the detached program from memory. A local user could exploit this race conditi...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Arbitrary physical memory and I/O port read/write via ThrottleStop driver ThrottleStop is a small legitimate application used to monitor and correct CPU throttling. It has a driver that faciliates these tasks and it mostly doesn't have any sort of input validation...

Stryker

Stryker Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303 System Requirements x64 Windows 7/8/8.1/10; Stryker designed only for x64 Windows; Administrative privilege is required. Features Driver Signature Enforcement Overrider similar to DSEFIx; Protected Processes Hijacking via...

CVE-2025-27840-WIP

CVE-2025-27840-WIP A Work-In-Progress for CVE-2025-27840 CVE-2025-27840 Overview CVE-2025-27840 is a medium-severity vulnerability CVSS 6.8 affecting Espressif ESP32 Bluetooth chips , which are integrated into over 1 billion IoT devices globally. The flaw involves 29 undocumented Host Controller...

CVE-2026-99016

The Linux kernel contains a vulnerability in the RISC-V architecture's futex implementation. When the tagged address ABI is enabled (CONFIG_RISCV_ISA_SUPM , PMLEN != 0 ), the access_ok() function checks an untagged address, but arch_futex_atomic_op_inuser() and futex_atomic_cmpxchg_inatomic() pas...

CVE-2026-99016 riscv: futex: untag the user pointer before the atomic access

In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user pointer before the atomic access accessok checks untaggedaddruaddr, but archfutexatomicopinuser and futexatomiccmpxchginatomic hand the raw uaddr to the inline asm amoswap/amoadd/.../lr.w+sc.w through...

CVE-2022-3699

CVE-2022-3699 Proof of Concept exploit for CVE-2022-3699 Exploit tested on Windows 10 22H2 build 19045.4651 and build 19045.3803 Vulnerability deals with allowing unprivileged users to access functionality that lets you read and write from physical memory from the instance of the kernel, however...

CVE-2026-98770

A flaw was found in the Linux kernel's USB gadget MIDI 2.0 driver. Under-sized descriptor arrays allow a local user to trigger an out-of-bounds memory access when setting up a large number of MIDI jacks through the configuration filesystem configfs. This issue primarily results in memory corrupti...

CVE-2026-98769

A flaw was found in the Linux kernel's Universal Serial Bus USB audio gadget driver. A connected USB host can send a specially crafted audio control request with an invalid command index, causing an out-of-bounds heap memory read and write. This flaw primarily allows an attacker to cause a Denial...

SIOCtl

SIOCtl Simple IOCTL dispatcher This is a generic IOCTL "dispatcher". I made this to be used as a POC for CVE 2018-8060 and 2018-8061, but it can be used to any device, IOCTL and data, thought. Input data is a binary file, containing raw data to be used as input buffer in IO control. Output data i...

kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5

A flaw was found in the Linux kernel's handling of IPv4 raw sockets. An unprivileged attacker with CAPNETRAW capabilities can craft and inject a malformed IPv4 packet with an invalid Internet Header Length IHL. This can lead to an out-of-bounds memory access when the packet is processed by certai...

CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - Unauthenticated Kernel Memory Read/Write via Debug ioctls CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 Discoverer : Daniil Gordeev Disclosed : 2026-05-03 Summary The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x out-of-tree "Jungle SDK"...

SUSE CVE-2026-98806

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix aura BPID assignment when CONFIGDCB is enabled Previously, BPID assignment under CONFIGDCB assumed queuetopfcmap was always initialized. For SDP VFs this leads to invalid memory access as it was not initialized...

SUSE CVE-2026-98807

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds when handling team device events The mlx5handlechangeupperevent and mlx5handlechangeinfodataevent functions check for LAG masters which includes both bonding and team devices but only call...

kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5

A flaw was found in the Linux kernel's handling of IPv4 raw sockets. An unprivileged attacker with CAPNETRAW capabilities can craft and inject a malformed IPv4 packet with an invalid Internet Header Length IHL. This can lead to an out-of-bounds memory access when the packet is processed by certai...

kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5

A flaw was found in the Linux kernel's handling of IPv4 raw sockets. An unprivileged attacker with CAPNETRAW capabilities can craft and inject a malformed IPv4 packet with an invalid Internet Header Length IHL. This can lead to an out-of-bounds memory access when the packet is processed by certai...