cve-2026-42945-nginx32-lab

CVE-2026-42945 nginx 32-bit Exploit Lab This repository is a reproducible Docker lab for studying CVE-2026-42945 in nginx 1.30.0. It contains a vulnerable 32-bit target, a primitive trigger, a lab-assisted known-address RCE validator, and a no-introspection brute-force driver. The proof boundary...

CVE-2024-43630-POC

CVE-2024-43630-POC This repository contains a POC that triggers a stack OOB write when executed, causing the system to crash. This vulnerability is an extremely interesting and rare relic that demonstrates the complexities and peculiarities of kernel programming, especially object management...

NotEnough

Huffman table hacking tool This tool calculates tricky canonical huffman histogram, which is able to trigger OOB Out Of Band write for vulnerable libwebp library i.e. libwebp = 1.3.1. This vulnerability is known as CVE-2023-4863 or CVE-2023-41064. We can overflow the pre-allocated huffman table b...

TUNderflow

TUNderflow CVE-2026-81000 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your u...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...

CVE-2026-31431

CVE-2026-31431 — From a NULL Pointer to Root: Exploiting AFALG AEAD in the Linux Kernel Bug class: Null pointer dereference → heap OOB write → credential overwrite Affected subsystem: net/alg/afalg.c Impact: Local Privilege Escalation unprivileged user → root Affected kernels: Linux 4.4 – 4.9...

sqlite-session-ncol

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-session-ncol Write-up: https://abraxaslabs.tech/research/sqlite-session-ncol sqlite-session-ncol Class: heap OOB write Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24...

CVE-2026-74915

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits ...

CVE-2026-65587

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software writes data past the end of an intended memory offset. Writing outside t...

EUVD-2026-113490

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits ...

CVE-2026-74915

A web page containing unusual WebGPU content can trigger an out-of-bounds (OOB) read and/or write crash in the GPU GLES user-space shared library within the GPU GLES render process. The vulnerability is associated with UntwiddlePOTSquare64bpp in the GPU DDK . On specific platforms where the graph...

CVE-2026-19199

A 32-bit integer overflow exists in the KM driver during page-to-byte conversion of an allocation size within the GPU DDK (specifically in RGXCreateHWRTDataSet ). This vulnerability allows a non-privileged user to conduct improper system calls to allocate physical memory, resulting in an undersiz...

CVE-2026-65587

A vulnerability exists in the GPU DDK where a web page containing unusual WebGPU content can trigger an Out-of-Bounds (OOB) write in the GPU user-space driver. The root cause is identified in the CalculateNPOTTwiddleSparsePageMap function during a TEXTURE_BASE_LEVEL change. This memory corruption...

EUVD-2026-113479

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software writes data past the end of an intended memory offset. Writing outside t...

CVE-2026-74915: Imagination Technologies Graphics DDK: A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or…

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits ...

CVE-2026-65587: Imagination Technologies Graphics DDK: A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the…

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software writes data past the end of an intended memory offset. Writing outside t...

Exploit for CVE-2026-111497

DotNet-HTTP2Shell / CVE-2026-111497 By Gh0st-Bx1 | github...

CVE-2026-57189 Asterisk: Possible RED T.140 Generation Accumulation OOB Write

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED out-of-bounds write during generation accumulation using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to...

kernel: Fix of 32 CVEs

s390/ipl: Fix NULL deref in dumpreipl without re-IPL parm block CVE-2026-98399 - USB: serial: ioti: fix heap overflow in buildi2cfwhdr CVE-2026-53195 - hwrng: geode - Fix PCI device refcount leak CVE-2022-50659 - ALSA: usb-audio: fix OOB write in sndusbmidinovationoutput CVE-2026-80829 - ubi: Fix...

CLSA-2026-1792979985 kernel: Fix of 154 CVEs

net: bridge: fix vlan tunnel dst refcnt when egressing CVE-2021-47222 - net: bridge: fix vlan tunnel dst null pointer dereference CVE-2021-47223 - writeback: fix race between cgroupwritebackumount and inodeswitchwbs CVE-2026-64378 - writeback, cgroup: increment iswnrinflight before grabbing an...