CVE-2026-98575

A flaw was found in the Linux kernel's PN533 NFC Near Field Communication driver. An attacker capable of connecting a malicious or malfunctioning USB device can supply a crafted response frame with an arbitrary data length value. Because the driver fails to validate this length against maximum...

CVE-2025-5777

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...

CVE-2025-21298

content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. Full patch diff via ghidriff: LINK vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of...

CVE-2026-98574

A flaw was found in the Linux kernel's Broadcom GENET network driver. Improper synchronization between disabling transmission queues and stopping completion polling during interface shutdown or suspend operations can prematurely re-enable a queue. This race condition allows packet transmission to...

frida-ios-dump-modern

Modern iOS IPA Dumper A modern iOS application memory decryption tool built for Frida 17.5.2+ with full support for iOS 14-16 and multiple jailbreaks. Status: ✅ Working and Tested - Successfully dumps and decrypts iOS apps using Frida 17.5.2 on: iOS 14.7.1 + Taurine jailbreak iPad mini 5 iOS...

CVE-2018-4878

CVE-2018-4878 POC CVE-2018-4878 was first demonstrated being exploited in the wild by TEMP.Reaper. This repository contains the POC we created from the analysed malware, which is known to work against 32-bit versions of Flash 27 by exploiting a Use-After-Free vulnerability. Successful exploitatio...

CVE-2026-98573

A flaw was found in the Linux kernel. An integer underflow in the networking subsystem allows an attacker to trigger an out-of-bounds memory copy by sending specially crafted Internet Protocol version 6 IPv6 packets with extension headers. This vulnerability can lead to kernel memory corruption,...

CVE-2024-50848

CVE-2024-50848: XXE in the WorldServer v11.8.2 An XML External Entity XXE vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 might lead to access sensitive system information and execute arbitrary commands via supplying a crafted .tmx file. To...

CVE-2026-98571

A flaw was found in the Linux kernel's stmmac network driver. This vulnerability can lead to a Denial of Service DoS or memory corruption when processing incoming network traffic under resource constraints. When the driver fails to allocate a network packet buffer, it recycles the underlying memo...

CVE-2026-98570

A flaw was found in the Linux kernel's IPv6 networking subsystem. An unauthenticated remote attacker can cause a Denial of Service DoS by sending network traffic through an affected IPv6 tunnel interface. Due to insufficient buffer allocation when reconstructing packet headers, an unchecked...

CVE-2026-98568

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN networking module. A race condition can occur when link properties are modified while neighbour advertisement reply packets are being processed, leading to inconsistent buffer size calculations. A local attacker could exploit thi...

CVE-2026-98567

A flaw was found in the Linux kernel. A local privileged user could trigger a Denial of Service DoS or kernel memory corruption by causing an out-of-bounds memory write. This issue occurs in the Transmit Packet Steering XPS networking mechanism when traffic classes are decreased without clearing...

memory-forensic

memory-forensic A memory forensics toolkit that profiles Windows kernels itself — and is cross-checked, process-for-process, against Volatility 3. mem4n6 reads every common dump format LiME, AVML, ELF core, Windows crash dumps, hibernation files, VMware save-states, kdump, raw… and walks processe...

CVE-2025-5777

CVE-2025-5777 AKA CitrixBleed 2 Is an OOB read in the login process of Citrix Gateway. This is a Proof of Concept exploiting the OOB CVE-2025-5777 to obtain memory data from a vulnerable Citrix Gateway instance, possibly leading to cookies/credentials theft. Usage I highly recommend using a venv...

CVE-2026-98566

A flaw was found in the Linux kernel's drm/imagination GPU driver. The driver fails to properly validate and bound the firmware reconstruction count against the fixed protocol array capacity when processing freelist reconstruction requests. A local attacker could exploit this vulnerability by...

CVE-2026-98563

A flaw was found in the Linux kernel's phylink component. When an error occurs during Ethernet physical layer PHY device initialization, the kernel prematurely stores a reference to the device before setup finishes. If the bringup operation fails, the device is detached and freed, but the kernel...

CVE-2026-98560

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When handling local connections, the system miscalculates the required communication paths, allocating internal work queues that are not properly freed during connection teardown. A local user can exploit this...

CVE-2026-98562

A flaw was found in the Linux kernel's Wangxun network driver library libwx. This vulnerability allows a local user to cause a Denial of Service DoS through memory corruption. A race condition in the Precision Time Protocol PTP transmit timestamp handling fails to properly synchronize packet...

CVE-2026-98555

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. When an error occurs during network packet header initialization, the kernel mistakenly frees the incorrect memory buffer, resulting in a use-after-free condition, a double-free, and memory leaks. An attacker could exploit...

CVE-2026-86922

A flaw was found in WebKitGTK. Due to a type confusion issue—where the application misinterprets an object's data type in memory—processing maliciously crafted web content can lead to memory corruption. A remote attacker could exploit this vulnerability to achieve arbitrary code execution on the...