CVE-2023-32784-EXPLOIT-REPORT

CVE-2023-32784 Exploit Demonstration Project Overview This repository provides a demonstration of CVE-2023-32784, a critical vulnerability found in KeePass versions prior to 2.54. The exploit allows the recovery of the master password through memory dumps, exposing stored credentials. This...

CVE-2024-33901-ProofOfConcept

CVE-2024-33901-ProofOfConcept Short program that demonstrates the vulnerability CVE-2024-33901 in KeePassXC version 2.7.7 The report for the class might need the source code linked, so that's why I created the repo for this How to replicate the vulnerability 1. Open KeePassXC and authenticate the...

CVE-2017-16995

The latest version of Ubuntu Ubuntu 16.04 has a high-risk local privilege escalation vulnerability, numbered CVE-2017-16995. This vulnerability exists in the Linux kernel system that calls eBPF bpf2. When a user provides a malicious BPF program, the eBPF verifier module generates a calculation...

CVE-2026-112052

A flaw was found in libspatialite. An integer overflow in the Well-Known Binary WKB geometry parsing routines can lead to a Denial of Service DoS or memory corruption. By providing a specially crafted database file or geometry object with an excessively large point count, an attacker can trigger...

CVE-2026-112048

A flaw was found in libspatialite. The library fails to validate the polygon ring count when parsing geometry data in the Well-Known Binary WKB format. An attacker can exploit this issue by supplying specially crafted geometry input to trigger uncontrolled memory allocation, leading to a Denial o...

EUVD-2026-103521

libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer. Attackers can craft a .las file with a LASSchema variable length record whose schema exceeds 65535 bytes, so tools...

CVE-2026-112059

Versions of libLAS through 1.8.1 are vulnerable to a heap out-of-bounds write in the point record reader. The root cause is the truncation of the schema byte size to 16 bits when sizing the point buffer. An attacker can exploit this by crafting a .las file containing a LASSchema variable length r...

CVE-2026-112048

Versions of libspatialite through 5.1.0 are vulnerable to uncontrolled memory allocation due to a failure to validate the polygon ring count in the ParseWkbPolygon function. An attacker can provide crafted geometry BLOBs—either within a SpatiaLite database or via ST_GeomFromWKB input—to trigger e...

CVE-2026-112048 libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count

libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or STGeomFromWKB input to crash the process or...

ATMMalScan

Introduction ATMMalScan is a commandline tool for Windows operating systems version 7 and higher, which helps to search for malware traces on an ATM during the DFIR process. This tool examines the running processes of a system, as well as the hard disk, depending on the specified file path. To sc...

CVE-2026-112020

LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepngutil.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...

CVE-2026-112012

libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in ttadecoderprocessstream and ttadecoderprocessframe because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero channels so decorrelation accesses cache-1 with...

CVE-2026-112020

The LodePNG library (versions through 20261006 ) is vulnerable to a heap out-of-bounds read in the lodepng::getFilterTypesInterlaced() function located in lodepng_util.cpp. The root cause is a lack of bounds checks on decompressed IDAT data . An attacker can exploit this by providing a crafted in...

EUVD-2026-103473

LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepngutil.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...

CVE-2026-112012 libtta through 2.3 Stack Out-of-Bounds Write via Zero Channel Count

libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in ttadecoderprocessstream and ttadecoderprocessframe because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero channels so decorrelation accesses cache-1 with...

CVE-2026-112012

The libtta library (versions through 2.3 ) contains a stack out-of-bounds read and write vulnerability within the tta_decoder_process_stream() and tta_decoder_process_frame() functions. The root cause is that header checks fail to reject a zero channel count . An attacker can provide a specially ...

EUVD-2026-103465

libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in ttadecoderprocessstream and ttadecoderprocessframe because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero channels so decorrelation accesses cache-1 with...

Linux-Kernel-local-DoS

Linux-Kernel-local-DoS Local linux kernel DoS based on memleak from an unpriv user, just need to do a PRTIMERCREATERESTOREIDSON prctl first based on https://x.com/spendergrsec/status/1990887509664928062...

ModuleShifting

ModuleShifting This tool has been presented at the 2023 x33fcon talk: "Improving the stealthiness of Memory Injection Techniques" Video Blogpost What is it ModuleShifting is stealthier variation of Module Stomping and Module overloading injection technique. It is actually implemented in Python...

cve-2024-1086-lpe

cve-2024-1086-lpe Technical analysis and proof-of-concept for CVE-2024-1086, a Linux kernel nftables use-after-free vulnerability leading to local privilege escalation. Includes vulnerability breakdown, affected versions, exploitation methodology, and mitigation guidance for research and...