CVE-2026-76014

A flaw was found in BusyBox. A local attacker can exploit a null pointer dereference vulnerability in the FEATUREWGETTIMEOUT handler within the networking/wget.c component. This occurs when the attacker manipulates the -T argument, leading to a denial of service. Mitigation Mitigation for this...

CVE-2023-3338-DECPwn

DECPwn Practicing different Linux kernel exploitation techniques with my DECnet vulnerability and null page mapping enabled. Scenarios Everything disabled : qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" Code execution is redirected to the output function in userland, which invokes...

Critical: Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

php_hack

This tool exploits a vulnerability called CVE-2019-11043, an instance of insecure pointer arithmatic, to gain access to poorly configured PHP servers. It can be downloaded here you will need to run it from the command line Usage: phphack target IP target port...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

CVE-2024-26475

CVE-2024-26475 Authors Sherlock Fang, Vlad Tronciu, Ayam Babu Description An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grubsfsreadextent function. Attack Vectors Crafting a payload to cause “treeblock =...

CVE-2025-50165-x64-Exploit

CVE-2025-50165 Windows Graphics Component RCE x64 Critical Remote Code Execution via malicious JPEG – Windows 11 24H2 unpatched CVSS 9.8 – No privileges, no interaction required root@kitploit: CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patche...

Critical: Red Hat Security Advisory: 389-ds:1.4 security, bug fix, and enhancement update

An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

pe-bear

PE-bear PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files...

freebsd-dhclient-poc

CVE-2020-7461 Reproducer PoC Authors: Moshe Kol, Shlomi Oberman Reproducer PoC for FreeBSD dhclient heap-based buffer overflow vulnerability when parsing DHCP option 119 CVE-2020-7461. The problem resides in the function findsearchdomainnamelen in the file sbin/dhclient/options.c. This function i...

CVE-2009-2692

CVE-2009-2692 Linux Null pointer dereference This is just the compiled binary of the code available in https://www.exploit-db.com/exploits/9545/ Compiled for education purposes It was compiled under CentOS 4.8...

CVE-2022-38694_unlock_bootloader

CVE-2022-38694 An attacker with physical access to the device can overwrite a function pointer somewhere in the BootROM data section or a return address stored on the stack and execute their own code with BootROM privileges. For detailed information, read the article by NCC Group. 快速指路：...

389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

Critical: Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Critical: Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

CVE-2019-10207

CVE-2019-10207 PoC for CVE-2019-10207 linux kernel: bluetooth: hciuart: kernel NULL pointer dereference root@kitploit: gcc CVE-2019-10207.c -o cve-2019-10207-poc -static test on 4.20.0 kernel compile CONFIG must be opened: root@kitploit: CONFIGBTHCIUARTMRVL=y CONFIGBTMRVL=y...

Critical: Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...