rsync: rsync: Memory corruption via out-of-bounds write in size parsing

An out-of-bounds write vulnerability in rsync's parsesizearg function allows a remote attacker to cause memory corruption. The flaw is triggered when snprintf truncates a formatted size string, resulting in an incorrect memory array index. Exploitation can lead to a denial of service and...

rsync: rsync: Information disclosure and denial of service via crafted files-from entry

A flaw was found in rsync. Remote unauthenticated attackers can exploit a heap out-of-bounds write vulnerability by supplying a crafted files-from entry. This entry, containing both an interior and trailing backslash, causes the addimpliedinclude function to under-count the trailing backslash whe...

rsync: rsync: Memory corruption via crafted file entries

A flaw was found in rsync. This out-of-bounds write vulnerability allows attackers to corrupt memory by triggering specific processing on specially crafted file entries when hard-link preservation is not active. This can lead to denial of service or other unpredictable system behavior...

CVE-2026-16147 it82xx2 USB device controller submits incomplete OUT transfer buffers, causing use-after-free and event-list corruption

The ITE IT82xx2 USB device-controller driver drivers/usb/udc/udcit82xx2.c mishandles multi-packet OUT transfers on non-control endpoints. In workhandlerout the active transfer buffer is obtained with udcbufpeek which does not dequeue it; when a full max-packet-size packet arrives but the buffer...

EUVD-2026-77777

The ITE IT82xx2 USB device-controller driver drivers/usb/udc/udcit82xx2.c mishandles multi-packet OUT transfers on non-control endpoints. In workhandlerout the active transfer buffer is obtained with udcbufpeek which does not dequeue it; when a full max-packet-size packet arrives but the buffer...

CVE-2023-42789

CVE-2023-42789 Vulnerability Checker Installation To use this vulnerability checker, make sure you have Python3 and lib colorama installed. root@kitploit: pip3 install colorama root@kitploit: python3 check.py IP PORT Description CVE-2023-42789 is an out-of-bounds write vulnerability affecting...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS EN ANDROID NULL PTR DEREF, OOM SOLO POR LAS RISAS...

exploitarium

https://discord.gg/WytKH65ZR únete para investigación, ayuda, documentación y más información útil para los interesados. Declaración Este repositorio estaba incompleto cuando se publicó. En cuanto al uso de IA, mi flujo de trabajo de fuzzing fue automatizado por IA con un flujo de trabajo estrict...

CVE-2017-5123

CVE-2017-5123 PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR The waitid implementation in upstream kernels did not restrict the target destination to copy information results. This can allow local users to write to otherwise protected kernel memory, which can lead to privilege escalation...

CVE-2015-6620-POC

CVE-2015-6620-POC-1 POC for one bug in CVE-2015-6620-1 ANDROIDID-24123723, AMessage unmarshal arbitrary write. The two bugs are merged to one CVE, and here is POC for one of them. Explaination root@kitploit: 533 sp AMessage::FromParcelconst Parcel &parcel 534 int32t what = parcel.readInt32; 535 s...

CVE-2022-42889-POC

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

CVE-2022-0492-Container-Escape

CVE-2022-0492-Container-Escape CVE-2022-0492-Container-Escape Implementado en Go Enlaces de referencia: https://github.com/chenaotian/CVE-2022-0492 https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/...

POC-CVE-2025-54988

CVE-2025-54988 - POC Disclaimer: I am not the original discoverer of this vulnerability. This post documents my process of reproducing the issue in a controlled environment for educational purposes and to help others validate their own systems. The tests were conducted in an isolated lab with no...

CVE-2026-52297

A flaw was found in FFmpeg. An out-of-bounds read can occur when a specially crafted MOV file is parsed due to insufficiently padded extradata. This vulnerability can lead to an application crash, resulting in a denial of service. Mitigation Do not parse untrusted files with the MOV demuxer in...

CVE-2026-52296

A flaw was found in FFmpeg. An out-of-bounds read can occur when a specially crafted file is encoded into the WMA Windows Media Audio format due to a missing required padding in extradata allocation. This issue can lead to an application crash, resulting in a denial of service. Mitigation Do not...

CVE-2026-91080

webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhaust memory by sending oversized bodies. Attackers can send multi-gigabyte request bodies with invalid signatures to trigger out-of-memory conditions and crash...

CVE-2026-19499

Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 WebKit Vulnerability Detector PoC This proof-of-concept detects whether a WebKit-based browser is vulnerable to CVE‑2025‑24201 , a high-severity out-of-bounds write vulnerability caused by incorrect capability validation in the WebGL implementation. 🔍 Vulnerability Summary...

CVE-2020-1362

Exploiting an Elevation of Privilege bug in Windows 10 CVE-2020-1362 Exploit memory corruption bug - analysis of CVE-2020-1362 WalletService has fixed Elevation of Privilege bugs in last Patch Tuesday, one of bugs are assigned with CVE-2020-1362. The bug leverage a out-of-bound bug in the service...

CVE-2026-91080

webhook through 2.8.3 (a Go-based webhook receiver) is vulnerable to unauthenticated memory exhaustion . The service reads the entire request body into memory before evaluating trigger rules, with no enforced size limit. An attacker can send a multi-gigabyte request body with an invalid signature...