CVE-2026-74698

A flaw was found in the Linux kernel's net/mlx5e driver. When a Send Queue SQ is re-activated, the Byte Queue Limits BQL counters are incorrectly reset even if there are still network transmissions in progress. This can lead to an inconsistent state, causing the kernel to trigger an error and...

CVE-2026-74699

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability occurs due to improper handling of the q-replaystate, where it is blindly overwritten. This can lead to a memory leak of previously allocated resources. An attacker could exploit this flaw to exhaust system memory,...

CVE-2018-6574-POC

Este repositorio nao tem um README...

CVE-2026-74654

A flaw was found in the Linux kernel's 8250dma serial driver. When a serial port is closed while an RX receive transfer is active, a stale state can persist where the rxrunning flag remains set even though the receive channel is no longer available. If the port is subsequently reopened, a specifi...

CVE-2026-55893

A flaw was found in Capstone, a disassembly framework. The SH floating-point decoders in arch/SH/SHDisassembler.c do not correctly validate the size of the operands array when processing certain instructions. This vulnerability allows a local attacker to provide specially crafted SH2A FPU bytecod...

CVE-2023-4226-POC

CVE-2023-4220 POC Maggiori informazioni su CVE-2023-4220: StarLabs Advisory Riepilogo...

CVE-2024-7479_CVE-2024-7481

CVE-2024-7479 & CVE-2024-7481 TeamViewer: elevazione di privilegi da utente a kernel Questo repository contiene la proof of concept dell'exploit di una vulnerabilità in TeamViewer che consente a un utente senza privilegi di caricare un driver di kernel arbitrario nel sistema. Desidero ringraziare...

CVE-2026-55894

A flaw was found in Capstone, a disassembly framework. The shdisassemble function incorrectly processes 16-bit instructions, leading to an attempt to read data from an unauthorized memory location an out-of-bounds read. A remote attacker could exploit this by providing specially crafted bytecode ...

cve-2020-27955-poc

Questo repository non contiene un README...

CVE-2026-77117

A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to...

CVE-2026-49263

A flaw was found in Capstone, a disassembly framework, affecting its WebAssembly WASM backend. A remote attacker could exploit this by providing a specially crafted brtable instruction. This could lead to a denial of service, where the disassembler gets stuck in a loop, or cause parser...

CVE-2026-18581

A flaw was found in llama.cpp. A local attacker can exploit this vulnerability by manipulating input to the Jinja Minja Template Parser component. This manipulation can lead to a reachable assertion, causing the application to terminate unexpectedly. This results in a Denial of Service DoS...

NGWAF

N3XT-G3N Web App Firewall NGWAF NGWAF è creato da@yupengfei, @zhangbosen, @matthewng e @elizabethlim. Un ringraziamento speciale a@ruinahkoh per i suoi contributi nelle fasi iniziali di NGWAF. NGWAF è un proof of concept sperimentale e non è pronto per l'uso in produzione nella sua forma attuale...

CVE-2025-4517-PoC

CVE-2025-4517-PoC PoC e spiegazione per la CVE-2025-4517 utilizzati in una CTF a cui stavo giocando. Spiegazione in arrivo...

CVE-2026-49282

A flaw was found in Capstone. The csinsnname application programming interface API in the M68K and RISCV backends does not properly validate caller-supplied instruction IDs. An attacker can provide an invalid instruction ID, leading to an out-of-bounds read. This can cause the process to crash,...

Grafiki

Grafiki Grafiki هو مشروع Django يتعلق بـ Sysmon والرسوم البيانية، في الوقت الحالي. في رأيي، EventViewer و Elastic وحتى Kibana ليست رسومية بما يكفي. التهديدات الحالية معقدة، وإذا كان المهاجمون يفكرون في الرسوم البيانية، فيجب على المدافعين أيضًا فعل ذلك. هذا دليل على المفهوم، لم يتم تصحيح الكود بعد...

CVE-2022-21907

CVE-2022-21907 Sicherheitslücke im HTTP-Protokollstapel ermöglicht Remote-Codeausführung und potenziellen Systemabsturz. Inhaltsverzeichnis CVE-2022-21907 Beschreibung Umgebung Konfiguration des Opfer-Rechners Konfiguration des Angreifer-Rechners Exploit Proof of Concept Referenzen Beschreibung...

cve-2016-4845_csrf

cve-2016-4845csrf Proof of concept für CSRF-Sicherheitslücke CVE-2016-4825 auf IO-DATA Recording Festplattenlaufwerk. Lizenz Diese Codes werden unter der MIT-Lizenz veröffentlicht. Bitte siehe LICENSE.txt...

CVE-2022-26134

CVE-2021-46422 RCE Installazione root@kitploit: git clone https://github.com/yigexioabai/CVE-2021-46422-RCE.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt 把CVE-2021-46422 RCE.py放到pocsuite3\pocs目录下 cd pocs Utilizzo di pocsuite3 URL singolo: root@kitploit: pocsuite -r CVE-2021-46422...

CVE-2024-4367-PoC

CVE-2024-4367-PoC Questa Proof of Concept PoC dimostra lo sfruttamento della vulnerabilità CVE-2024-4367, che coinvolge attacchi di Cross-Site Scripting XSS. Caratteristiche Questa PoC raccoglie e visualizza i seguenti tipi di informazioni: 1. Informazioni Generali: Dominio Titolo URL corrente UR...