CVE-2026-110170

A Use after free vulnerability exists in the Bindings component of Google Chrome prior to version 155.0.8059.79 . This flaw allows a remote attacker to read memory inside the sandbox by navigating to a crafted HTML page . The vulnerability is classified as High severity by Chromium security. No s...

CVE-2026-110170

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110143

Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...

CVE-2026-110143

Google Chrome versions prior to 155.0.8059.79 are vulnerable to a use of uninitialized variable within the ThirdParty lmza_sdk component. This flaw allows a remote attacker to potentially read memory inside the sandbox by providing a crafted file . The security severity is rated as High by Chromi...

cve-2011-3026-firefox

cve-2011-3026-firefox Example of exploiting CVE-2011-3026 on Firefox Linux/x86, from our Black Hat 2012 talk: "Exploiting the jemalloc Memory Allocator: Owning Firefox's Heap" Original slide deck available at: https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis Updated slide...

volatility3

Volatility 3: The volatile memory extraction framework Volatility is the world's most widely used framework for extracting digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated but offer visibility into...

JYso

JYso It can be used as a tool for ysoserial and JNDIExploit at the same time, and has the bypass function of multiple JNDI high versions, WAF, and RASP 🚀 Getting Started Guide 📢 Please take a moment to read this document, it will help you quickly get familiar with JYso! 🧐 Use the Documentation...

Inline-Execute-PE

Inline-Execute-PE DISCLAIMER: This project is complex and failure to understand how it works and adequately test it can result in you crashing Beacons and losing access! I highly encourage you to read all of the documentation up until the "Design Considerations and Commentary" section! Introducti...

CVE-2026-100126

Adobe Bridge is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker can exploit this issue to access sensitive information, but the attack requires user interaction , specifically the victim opening a malicious file. No spe...

CVE-2021-21551

CVE-2021-21551 Simple PoC for exploiting CVE-2021-21551 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-21551 An issue was discovered in signed dell windows driver dbutil23.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine lacks of...

CVE-2026-103825

Substance3D - Designer is vulnerable to an out-of-bounds read (CWE-125) that may lead to the disclosure of sensitive memory. To exploit this vulnerability, an attacker requires user interaction to trick a victim into opening a malicious file . No specific affected versions, root causes, or remedi...

CVE-2026-100131

Adobe Substance 3D Sampler is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory. An attacker can leverage this flaw to expose sensitive information, though exploitation requires user interaction to open a malicious file. Adobe has rele...

CVE-2026-100130

The software Adobe Substance 3D Sampler is affected by an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Practical exploitation requires user interaction , specifically when a victim opens a malicious file. Adobe has released a pr...

CVE-2026-106623

The ColdFusion platform is affected by an Incorrect Authorization vulnerability (CWE-863) that allows an attacker to disclose sensitive memory information. The vulnerability is exploitable over the network without requiring any user interaction. While the documents confirm the high confidentialit...

CVE-2026-78628

The Okta Credential Provider for Windows contains an improper input validation vulnerability. The software fails to validate the buffer size and packed string offsets of a serialized credential buffer before interpreting it as a Kerberos logon structure . Processing a malformed buffer can cause t...

Fiber

Description A fiber is a unit of execution that must be manually scheduled by the application rather than rely on the priority-based scheduling mechanism built into Windows. Fibers are often called lightweight threads. For more detailed information about what are and how fibers work consult the...

CVE-2026-103850

Substance3D - Stager is affected by an out-of-bounds read vulnerability (CWE-125). An attacker could leverage this flaw to cause the disclosure of sensitive memory and other sensitive information. Successful exploitation requires user interaction , specifically where a victim opens a malicious fi...

Vol3xp

Vol3xp, Volatility 3 Explorer Plugins WinObj - Windows Kernel Objects Explorer an improve of https://github.com/kslgroup/WinObj for volatility 3 winobj.py WinObj very similar to WinObj sysinternals Also supports Struct Analyzer and WinObjGui from VolExp. RAMMap - Physical Address Mapping pfn.py...

libget_user_exploit

This library read in kernel memory by CVE-2013-6282 exploit...

CVE-2026-8053-MongoDB

CVE-2026-8053 — MongoDB Server Out-of-Bounds Write Overview Attribute| Value ---|--- CVE ID| CVE-2026-8053 Technical Name| FlatBSON Duplicate Field Index Drift Vulnerability Type| CWE-787 — Out-of-bounds Write CVSS v4.0| 8.7 HIGH CVSS v3.1| 8.8 HIGH EPSS| 0.064% 20th percentile — low exploitation...