400537 matches found
CVE-2025-7771-Vulnerability-Exploration
š ThrottleStop.sys Kernel Exploit ā HVCI-Compatible Physical Memory Mapper CVE-2025-7771 ā Arbitrary Physical Memory Read/Write via ThrottleStop.sys IOCTLs ā ļø Disclaimer This project is published for educational and research purposes only. The goal is to demonstrate how a signed, trusted kernel...
VIKIROOT
VIKIROOT This is a CVE-2016-5195 PoC for 64-bit Android 6.0.1 Marshmallow perhaps 7.0 ?, as well as an universal & stable temporal root tool. It does not require a SUID executable or any filesystem changes. Features SELinux bypass see below for details. Memory-only: does not modify the filesystem...
MiniPlasma-Runner
MiniPlasma-Runner Modified version of Nightmare-Eclipse/MiniPlasma CVE-2020-17103 adapted for C2 usage. Original PoC runs from disk only. This version runs entirely from memory via execute-assembly, with a split-binary approach to avoid detection. Disclaimer This tool is provided for authorized...
EUVD-2026-104588
Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous visitors to bypass the system.images.maxpixels limit when system.images.urlactions is enabled. Attackers can send single-dimension or percentage forceResize, zoomCrop, or...
CVE-2026-112275
A flaw was found in netpbm. An attacker could exploit this vulnerability by enticing a user to process a specially crafted Sun raster image file using the rasttopnm conversion utility. A heap-based buffer overflow in the run-length decoder allows out-of-bounds data to be written into memory...
CVE-2026-53493
A flaw was found in containerd. During an image pull operation, containerd fails to enforce recursion and deduplication limits when traversing descriptor graphs in Open Container Initiative OCI image indexes. A remote attacker can exploit this flaw by serving a crafted image index, triggering...
CVE-2024-21762-Safe-Check
CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overview Field| Value ---|--- CVE| CVE-2024-21762 Advisory| FG-IR-24-015 CVSS| 9.8 Critical CWE| CWE-787 Out-of-bounds Write CISA KEV| Yes - actively exploited in the wild Attack Vector| Network unauthenticated Affected Component| sslvpnd SSL V...
CVE-2026-98532
A flaw was found in the Linux kernel. A remote attacker could cause a Denial of Service DoS or memory corruption by sending specially crafted IPv6 network packets. The IPv6 extension header parsing mechanism fails to verify that the declared length of a header fits within the received packet data...
CVE-2023-50245
CVE-2023-50245 Vulnerability Overview CVE-2023-50245 CVSS : 9.8 Dec 11, 2023 Image Viewer Vulnerability Vulnerability Description github advisories arbitrary address write vulnerability POC 1 1404.9264: Access violation - code c0000005 first chance First chance exceptions are reported before any...
CVE-2025-14847
MongoDB CVE-2025-14847 Vulnerability Detection Tool MongoDB Memory Leak Vulnerability CVE-2025-14847 Detection Tool ā ļø Important: This tool is for authorized security testing and vulnerability assessment only. Unauthorized use may violate the law. š Table of Contents Vulnerability Description...
CVE-2014-4322
poc code works on Nexus 5 Android4.4.4 Gain privilegesļ¼system-rootļ¼as part of https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege authorļ¼andy websiteļ¼https://blog.csdn.net/koozxcv The exploit must be excuted as system privilege and serveral specific SELinux context.If exploit...
CVE-2026-92707
MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...
CVE-2026-19029
A flaw was found in HDF5. When decompressing data using the scale-offset filter, the library fails to verify whether a compressed data chunk is large enough before reading from it. An attacker could exploit this vulnerability by enticing a user or service to process a specially crafted HDF5 file,...
throttlestop-exploit-rw
Physical Memory Mapper Research tool demonstrating physical memory access through virtual-to-physical address translation combined with vulnerable driver exploitation. Overview This project explores low-level Windows memory management by combining the superfetch technique for address translation...
CVE-2026-111752
A denial of service DoS vulnerability was identified in "@angular/router" when Server-Side Rendering SSR is enabled on Node.js V8. During route recognition, "@angular/router" fails to validate whether an auxiliary outlet segment in the URL matches a route configured for that specific outlet name...
CVE-2025-55182-GodzillaMemoryShell
This repository does not have a README...
NORM-EDR
NORM-EDR NORM Normal EDR is an experimental kernel-mode EDR research project focused on explainable detection rather than silent blocking. Instead of assigning scores or killing processes, NORM answers one question: Why does this binary look suspicious? This project is built step-by-step in publi...
CVE-2026-110685 Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag
Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decodetag. With allowtags, a tagged value's class name and argument array are decoded and passed to the class's THAW method. Both are released only after THAW returns, so a THA...
EUVD-2026-104564
Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decodetag. With allowtags, a tagged value's class name and argument array are decoded and passed to the class's THAW method. Both are released only after THAW returns, so a THA...
CVE-2026-110685
The Cpanel::JSON::XS Perl module in versions before 4.80 is vulnerable to a memory leak in the decode_tag function when allow_tags is enabled. When the THAW method of a tagged value's class fails (dies) during decoding, the decoded argument structure remains allocated in memory because it is only...