86781 matches found
PoC-CVE-2025-69420
CVE-2025-69420 โ OpenSSL TimeStamp Response ๅๆททไนฑ PoC OpenSSL ใซใใใ CVE-2025-69420 ใฎใฏใฉใใทใฅๅฐ็จๅฎ้จๅฎคๅ็พๅจใPoC ใฏๆๅนใช RFC 3161 TimeStamp Response ใ่ชญใฟ่พผใฟใ็ฝฒๅๆธใฟ ESS ๅฑๆงใใกใขใชไธใง VASN1SEQUENCE ใใ VASN1NULL ใซๅคๆดใใTSRESPverifyresponse ใๅผใณๅบใใพใใ ๅฝฑ้ฟใๅใใใใซใใงใฏใosslessgetsigningcertv2 ใพใใฏ osslessgetsigningcert ใใใขใฏใใฃใใชๅใๆค่จผใใใซ...
CVE-2022-21971-Windows-Runtime-RCE
CVE-2022-21971: prauthproviders ใซใใใๅๆๅใใใฆใใชใใใคใณใฟใฎ่งฃๆพ ๆ นๆฌๅๅ WapAuthProvider::CreateInstance ใณใณในใใฉใฏใฟใฏใWapAuthProvider ใชใใธใงใฏใ 0x78 ใใคใ ใๅฒใๅฝใฆใฆๅๆๅใใพใใใใใฎ็ถๆ ใๅฎๅ จใซๅๆๅใงใใพใใใ ใชใใปใใ 0x50 ใฎใใคใณใฟใฏๅๆๅใใใฆใใใใใในใใฉใฏใฟใๅผใณๅบใใใใจใใซ่งฃๆพใใใพใ WapAuthProvider::WapAuthProvider ๅ : root@kitploit:...
CVE-2019-19203
CVE-2019-19203 ๅจOniguruma 6.x๏ผ6.9.4rc2ไนๅ็ๆฌ๏ผไธญๅ็ฐไบไธไธช้ฎ้ขใๅจๆไปถgb18030.c็ๅฝๆฐgb18030mbcenclenไธญ๏ผๅจ่งฃๅผ็จUCharๆ้ๆถๆชๆฃๆฅๆฏๅฆๅทฒ่ถ่ฟๅน้ ๅญ็ฌฆไธฒ็ๆซๅฐพ๏ผ่ฟๅฏผ่ดไบๅบไบๅ ็็ผๅฒๅบ่ฟๅบฆ่ฏปๅใ ็ ็ฉถไบบๅ๏ผManhND๏ผTarantulaๅข้๏ผVinCSS๏ผVingroupๆๅ๏ผ ไปไนๆฏOniguruma Oniguruma็ฑK...
d-os-descriptor
d-os-descriptor Summary The USB Gadget Subsystem includes security issues in the OS descriptor handling section of compositesetup function composite.c. Processing of properly crafted control transfer request messages result in device crash due to null pointer dereference or memory corruption...
CVE-2026-43499-poc
Weaponisation research for CVE-2026-43499 ghostlock. the rtmutex removewater proxy path bug that leaves a tasks piblockedon dangling into its own popped kernel stack frame. The bug class and original exploit strategy credit to nebusec their write-up here everything in this repo is my own...
Exim-CVE-2018-6789
Exim CVE-2018-6789 PoC materials to exploit CVE-2018-6789. Blogpost explaining the PoC is available on Synacktiv Blog. This PoC connects to a vulnerable Exim server and exploits CVE-2018-6789. Usage root@kitploit: usage: exploit -hv options: -h, --help Print this help -v, --verbose Enable verbose...
Security update for c-ares (important)
openSUSE security update: security update for c-ares ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21721-1 Rating: important References: bsc1270416 bsc1276290 bsc1276291 Cross-References: CVE-2026-33630 CVE-2026-69184 CVE-2026-69186 CVSS scores:...
CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-
CVE-2026-22004 โ Git LFS Pointer Poisoning Supply Chain Program Code Bash + Python root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid...
POC_CVE-2025-29943_Write-what-where-Condition
StackWarp: PoC for CVE-2025-29943 AMD ใใญใปใใตใซใใใใใผใใฆใงใข่ๅผฑๆง StackWarp CVE-2025-29943 ใฎๆฆๅฟตๅฎ่จผ PoC ใงใใใใฎ่ๅผฑๆงใซใใใใในใ ใใคใใผใใคใถใผ ไธใฎ็ฎก็่ ๆจฉ้ใๆใคๆปๆ่ ใ CPU ใใคใใฉใคใณ่จญๅฎใๆไฝใใSEV-SNP ใฒในใไปฎๆณใใทใณๅ ใฎในใฟใใฏใใคใณใฟใ็ ดๅฃใใใใจใงใๆจฉ้ๆๆ ผใจไปปๆใณใผใๅฎ่กใๅผใ่ตทใใใใจใๅฏ่ฝใซใชใใพใใ ๐ ่ๅผฑๆงใฎๆฆ่ฆ ID: CVE-2025-29943 ่ฃฝๅ: AMD EPYC ใใญใปใใต 7003ใ8004ใ9004ใ9005 ใทใชใผใบใใใณใใฎ็ตใฟ่พผใฟใใชใข...
cve-2021-3449
CVE-2021-3449 OpenSSL This issue was reported to OpenSSL on 17th March 2021 by Nokia. The fix was developed by Peter Kรคstle and Samuel Sapalski from Nokia. Mitigation The only known fix is to update libssl1.1...
IPC-Memory-Mac-OSX-Exploit
IPC-Memory-Mac-OSX-Exploit IPC Local Security Bypass Inter Process Communication through shared memory is a concept where two or more process can access the common memory. And communication is done via this shared memory where changes made by one process can be viewed by another process. The kern...
optee-qemu
CVE-2021-44733: Fuzzing and exploitation of a use-after-free in the Linux kernel TEE subsystem Recently a use-after-free vulnerability was discovered in the Linux kernel TEE subsystem, up to and including version 5.15.11, and was assigned CVE-2021-44733 1. At a first glance it did not seem to be...
CVE-2021-38304-PoC
CVE-2021-38304 Proof of Concept Overview This repository contains a proof of concept for a critical security vulnerability in older versions of the National Instruments nipalk.sys driver. The vulnerability allows for arbitrary code execution and memory disclosure in kernel mode. It is intended...
CVE-2018-1000117
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:51+00:00| seen| Telegram/yngyEw40TVGOGuJmHaN3GRlPpgOSJbqwpKH4VCTtcW0tCfE 2026-09-02 01:03:29+00:00| seen| Telegram/yngyEw40TVGOGuJmHaN3GRlPpgOSJbqwpKH4VCTtcW0tCfE...
SIOCtl
SIOCtl Simple IOCTL dispatcher This is a generic IOCTL "dispatcher". I made this to be used as a POC for CVE 2018-8060 and 2018-8061, but it can be used to any device, IOCTL and data, thought. Input data is a binary file, containing raw data to be used as input buffer in IO control. Output data i...
CVE-2026-23479-Redis-UAF-Proof-of-Concept
๐ฅ CVE-2026-23479 โ Redis UAF Proof of Concept Use-After-Free in RedisunblockClientOnKey leading to Remote Code Execution Proof of concept with GDBโassisted exploitation educational / lab use only ๐ Overview CVE-2026-23479 is a critical UseโAfterโFree UAF vulnerability in Redis versions 7.2.0...
httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash
A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...
httpd: NULL pointer dereference via specially crafted request
A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...
PoC-CVE-2025-69421
CVE-2025-69421 crash-only reproducer This repository contains a minimal malformed PKCS12 file that reproduces CVE-2025-69421 in an isolated laboratory environment. The generated PFX contains EncryptedData whose EncryptedContentInfo omits the optional encryptedContent field. Vulnerable OpenSSL...
CVE-2025-24990
CVE-2025-24990 โ Windows Untrusted Pointer Dereference EoP Research writeup by Sentinel AI Defense. Defensive analysis only โ no working exploit or PoC is published here. A privileged Windows component dereferences a pointer it receives from an untrusted context without validating it โ giving a...