-CVE-2018-0834-aab-aar

Shoutout an @reubensammut, du bist ein Tier. CVE-2018-0834 vollständige Codeausführung. Enthält statische Offsets, umgeht cfg,dep,aslr : viel Spaß...

CVE-2022-22057_SM-F926U

Fork Meine Adaption für das SM-F926U basierend auf dem ursprünglichen Exploit hier Großer Dank an m-y-mo für die Entdeckung des Exploits und seine extreme Geduld bei all meinen Fragen, um dies auf das SM-F926U zu portieren und nutzbar zu machen. Ich habe einen Start-Daemon libtimeline.so basieren...

netbsd_hfs

Overflow local do hfs no NetBSD Detalhes do bug: root@kitploit: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 1...

rmx3888-cve-2026-43499-config

Configuração do Exploit CVE-2026-43499 para realme RMX3888 Informações do dispositivo Marca/Modelo : realme RMX3888 Versão do Android : 16 SDK 36 ID do build : BP2A.250605.015 Kernel : Linux 6.1.141-android14-11-o-gffc54a6d2287 SoC : Qualcomm SM8650 Snapdragon 8 Gen 3 Arquitetura : ARM64 aarch64...

pe-signgen

pe-signgen Windows PE फ़ंक्शंस के लिए क्रॉस-संस्करण बाइनरी सिग्नेचर और RVA ऑफसेट अवलोकन pe-signgen रिवर्स इंजीनियरों और सुरक्षा शोधकर्ताओं के लिए एक उपकरण है जो स्वचालित रूप से जनरेट करता है: अनएक्सपोर्टेड और एक्सपोर्टेड फ़ंक्शंस के लिए बाइनरी सिग्नेचर वाइल्डकार्ड के साथ बाइट पैटर्न बाइनरी में...

CVE-2018-4121

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit من إعداد MWR Labs c 2018 التفاصيل يستهدف استغلال إثبات المفهوم هذا إصدارات Safari 11.0.3 13604.5.6 على macOS 10.13.3 17D47 فقط. قم بتجميع الحمولة payload التي تختارها كملف dylib مع مُنشئ constructor شغّل python filetojsarray.py your.dylib...

cve-2018-12386

Exploit RCE in Sandbox di Firefox CVE-2018-12386 Ecco un semplice exploit per la vulnerabilità CVE-2018-12386 scoperta da Niklas Baumstark, Samuel Groß e Bruno Keith. Questo è principalmente un PoC che ho realizzato per divertimento, non c'è alcun bypass della sandbox e funzionerà solo su una...

heap-viewer

HeapViewer An IDA Pro plugin to examine the heap, focused on exploit development. Currently supports the glibc malloc implementation ptmalloc2. 3rd place winner of the 2018 Hex-Rays Plugin Contest Requirements IDA Pro = 7.0 Tested on glibc 2.23 = 2.26 GraphView for linked lists bins/tcache Struct...

darksword-kexploit

DarkSword Kernel Exploit Reimplementado em Objective-C. Supostamente suporta iOS 15.0 - 26.0.1. Offsets hardcoded para 15.x? NOTA: ESTE EXPLOIT NÃO FOI DESCOBERTO / VAZADO POR MIM, A FONTE ORIGINAL DO VAZAMENTO É https://github.com/htimesnine/DarkSword-RCE ESTE EXPLOIT TAMBÉM É COMPLETAMENTE NÃO...

dezlock-dump

dezlock-dump Extrai tudo de um jogo Source 2 em execução Deadlock, CS2, Dota 2 e gera um SDK C++ à prova de patches que resolve offsets em tempo de execução. Sem valores fixos, sem atualizações manuais quando o jogo é atualizado. Início Rápido 1. Baixe da seção Releases ou compile a partir do...

ntoskrnl-metadata

ntoskrnl-metadata Ein IDA-Python-Skript zum Extrahieren kritischer Kernel-Metadaten aus Windows-ntoskrnl.exe-Binärdateien. Dieses Tool extrahiert automatisch Funktions-RVAs und EPROCESS-Strukturoffsets, die für die Entwicklung von Exploits gegen CVE-2026-40369 und andere Kernel-Schwachstellen...

CVE-2026-68462

A flaw was found in the Linux kernel. The BPF Berkeley Packet Filter verifier, responsible for ensuring the safety of BPF programs, incorrectly processed negative constant offsets when accessing buffer pointers. This oversight could allow a local attacker to craft a malicious BPF program that...

CVE-2026-72029

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX downlink decoder muxdladbdecode walks a chain of aggregated datagram tables using offsets and lengths taken from the modem. firsttableindex, nexttableindex, tablelength,...

CVE-2026-68477

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause...

EUVD-2026-55386

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix memory leak in bpfjitfree When bpfintjitcompile is called for subprograms, it returns early during the first pass !prog-isfunc || extrapass is false, keeping ctx-offset alive for the subsequent extra pass. If...

CVE-2026-68285 LoongArch: BPF: Fix memory leak in bpf_jit_free()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix memory leak in bpfjitfree When bpfintjitcompile is called for subprograms, it returns early during the first pass !prog-isfunc || extrapass is false, keeping ctx-offset alive for the subsequent extra pass. If...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock-Galaxy 中文: READMEZH.md This is...

CVE-2026-11743

The SF32LB MPI QSPI NOR flash driver drivers/flash/flashsf32lbmpiqspinor.c validated the flash offset and length on its read and write paths with the test offset + size data-size. Because offset is a signed offt while size is unsigned, a negative offset is converted to a large unsigned value and...

EUVD-2026-54682

The SF32LB MPI QSPI NOR flash driver drivers/flash/flashsf32lbmpiqspinor.c validated the flash offset and length on its read and write paths with the test offset + size data-size. Because offset is a signed offt while size is unsigned, a negative offset is converted to a large unsigned value and...

CVE-2026-64467

A flaw was found in the Linux kernel's rustbinder component. This vulnerability arises from an error in how memory offsets are handled during cleanup operations on 32-bit systems. An attacker could exploit this to corrupt the system's reference accounting, causing resources to be released...