CVE-2026-79836

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

CVE-2022-22947

Copied from Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...

CVE-2026-32941

A framework-wide vulnerability in Sliver C2 allows for an unauthenticated, remote Denial of Service by triggering Uncontrolled Memory Allocation CWE-789 / CWE-400, leading to a process-wide Out-of-Memory OOM crash. References: Tenable Reproduction Steps: 1. Extract Credentials: Obtain the mTLS...

dfir-malware-investigation

DFIR Malware Investigation Lab – Spring4Shell CVE-2022-22965 A comprehensive Digital Forensics & Incident Response DFIR project that simulates, detects, and investigates the Spring4Shell CVE-2022-22965 critical vulnerability. This project demonstrates the complete incident response lifecycle from...

EUVD-2026-102024

A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior...

CVE-2026-79837

A vulnerability in HPE NonStop SQL/MX UDR SERVER (version T1230 - T1230L40 and earlier ) may allow a crafted message to trigger process termination , service disruption , or memory corruption , leading to undefined behavior. This issue is categorized as a high severity risk with a CVSS 3.1 score ...

CVE-2026-79837 HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability

A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior...

ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free

A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path...

CVE-2022-22947-exp

CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability and wrote an exploit exp Later, based on an article by a senior researcher, wrote an exp for memory webshell injection, for reference only...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 RFCOMM Bluetooth "Heartbleed" Exploitation Framework Author: Sastra Adi Wiguna Purple Elite Teaming Date: January 20, 2026 Version: 1.0 Full-System Replication License: RED TEAM USE ONLY Do not distribute...

CVE-2025-14847---MongoBleed

Mongobleed CVE-2025-14847 – Go Proof of Concept This repository contains a Go proof-of-concept exploit for CVE-2025-14847 , a MongoDB memory disclosure vulnerability commonly referred to as Mongobleed. This PoC is a Go reimplementation of the original Python exploit by Joe Desimone , available...

CVE-2011-0762

CVE-2011-0762 Exploit C exploit for the CVE-2011-0762 vulnerability in FTP servers that allows sending a STAT command with a malicious payload to cause potential crashes or unwanted execution. Description This exploit connects to an FTP server and authenticates using a provided username and...

rdg_scanner_cve-2020-0609

Scanning for Remote Desktop Gateways Potentially unpatched CVE-2020-0609 and CVE-2020-0610 The scanner has 2 modes of operation: Check for systems vulnerable to CVE-2020-0609 on UDP 3391 Uses the vuln scan code of https://github.com/MalwareTech/RDGScanner Disclaimer Scanning for memory corruption...

CVE-2026-49975-HTTP-2-Bomb

A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...

CVE-2014-4322_poc

CVE-2014-4322poc poc code works on Nexus Android 4.4/5.0 Gain privileges:system - root,as a part of https://github.com/retme7/CVE-2014-7911poc author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net The exploit must be excuted as system privilege and severa...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this script...

Exploit-Dirty-Cow

Exploit - Dirty Cow CVE-2016-5195 Privilege Escalation Lab | Linux Kernel Exploit 📋 Overview Hands-on lab reproducing the DirtyCow vulnerability CVE-2016-5195, a critical race condition found in the Linux kernel that allows unprivileged users to gain write access to read-only memory mappings,...

CVE-2021-3656-Demo

CVE-2021-3656: This issue is caused by missing validation of the the virtext VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS Virtual VMLOAD/VMSAVE for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and...

CVE-2020-0069_poc

Description This repository contains the materials we used to investigate CVE-2020-0069 on a Xiaomi Redmi 6a with a Mediatek SoC MT6762M. There are three programs: kernelrw.c a C program allowing to read/write kernel memory poc.sh a shell script syscallhook.c a C library that can be used to trace...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 This is an exploit for CVE-2017-7047, a logic error in libxpc which allowed malicious message senders to send xpcdata objects that were backed by shared memory. Consumers of xpc messages did not seem to expect th...