NotEnough

Huffman table hacking tool This tool calculates tricky canonical huffman histogram, which is able to trigger OOB Out Of Band write for vulnerable libwebp library i.e. libwebp = 1.3.1. This vulnerability is known as CVE-2023-4863 or CVE-2023-41064. We can overflow the pre-allocated huffman table b...

CVE-2024-43630-POC

CVE-2024-43630-POC This repository contains a POC that triggers a stack OOB write when executed, causing the system to crash. This vulnerability is an extremely interesting and rare relic that demonstrates the complexities and peculiarities of kernel programming, especially object management...

CVE-2026-88776

CVE-2026-88776: NetScaler nsppe Pre-Auth OOB Write Integer underflow in the DataStream / Oracle TNS record parser Summary NetScaler can load-balance Oracle databases. Point an ORACLE-type vserver at it and the packet engine starts speaking the Oracle TNS protocol itself, parsing client traffic wi...

gitlab-rce-toolkit

GitLab Onigmo RCE Exploit Toolkit CVE-2026-97229 + CVE-2026-110264 — Two critical CVSS 10.0 unauthenticated RCE vulnerabilities in GitLab CE/EE via Onigmo regex engine integer overflow. Authorized testing only. Every target must be yours or covered by written authorization. Vulnerabilities CVE|...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...

CVE-2026-89633

CVE-2026-89633 — cifs SMB1 coalescet2 heap OOB write English | 简体中文 Research PoC/EXP for a heap out-of-bounds write in the Linux cifs.ko SMB1 client. A malicious SMB1 server controls DataOffset in a TRANS2 secondary response, and coalescet2 copies the 8-byte secondary payload to &primary-Protocol...

CVE-2026-31431

CVE-2026-31431 — From a NULL Pointer to Root: Exploiting AFALG AEAD in the Linux Kernel Bug class: Null pointer dereference → heap OOB write → credential overwrite Affected subsystem: net/alg/afalg.c Impact: Local Privilege Escalation unprivileged user → root Affected kernels: Linux 4.4 – 4.9...

TUNderflow

TUNderflow CVE-2026-81000 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your u...

sqlite-session-ncol

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-session-ncol Write-up: https://abraxaslabs.tech/research/sqlite-session-ncol sqlite-session-ncol Class: heap OOB write Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24...

CVE-2026-74911

Software installed and run as a non-privileged user may conduct improper GPU system calls to the execution of an error path that triggers an OOB read & write. An error can be triggered which causes the index of the array element to be cleaned up by the error path would be outside of the array...

CVE-2026-74911

Software installed and run as a non-privileged user may conduct improper GPU system calls to the execution of an error path that triggers an OOB read & write. An error can be triggered which causes the index of the array element to be cleaned up by the error path would be outside of the array...

CVE-2026-74911

Software running as a non-privileged user may perform improper GPU system calls that trigger an error path leading to an Out-of-bounds (OOB) read and write . The vulnerability occurs because the error path attempts to clean up an array element index that falls outside the array bounds (CWE-787). ...

CVE-2026-49747

A vulnerability exists in the GPU DDK where software running as a non-privileged user can perform GPU system calls to trigger an integer overflow . This occurs when mapping a GPU buffer larger than 4GB , specifically involving the PVRDmaBufOpsMapCommon function. The resulting overflow causes corr...

CVE-2026-49747 GPU DDK - OOB write for mappings larger than 4GB due to integer overflow in PVRDmaBufOpsMapCommon

Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers. The integer overflow caused when mapping a GPU buffer 4GB causes corruption of array length, and can lead to kernel panics or out of bounds access...

PT-2026-146346

Software installed and run as a non-privileged user may conduct improper GPU system calls to the execution of an error path that triggers an OOB read & write. An error can be triggered which causes the index of the array element to be cleaned up by the error path would be outside of the array...

cve-2026-42945-nginx32-lab

CVE-2026-42945 nginx 32-bit Exploit Lab This repository is a reproducible Docker lab for studying CVE-2026-42945 in nginx 1.30.0. It contains a vulnerable 32-bit target, a primitive trigger, a lab-assisted known-address RCE validator, and a no-introspection brute-force driver. The proof boundary...

Debian dla-4897 : mutt - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4897 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4897-1 [email protected]...

cve-2026-99999-audit

cve-2026-99999-audit -9.3%20CRITICAL-critical?style=flat-square Read-only audit script for CVE-2026-99999 a.k.a. PwnEscape. The bug is in the Linux kernel's IPv4 stack: it trusts the checksum metadata a packet arrives with. An untrusted VM guest can use it to escape to the host, and a local user ...

CVE-2026-58809

In smmudomainconfigs1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58809

A missing bounds check in smmu_domain_config_s1 of arm-smmu-v3.c leads to a possible Out-of-Bounds (OOB) Write . This vulnerability could result in local escalation of privilege , requiring System execution privileges to exploit. Exploitation does not require user interaction. No specific remedia...