CVE-2026-98129

A flaw was found in the Linux kernel's mpi3mr SCSI driver. The driver fails to validate the return value of a memory allocation when adding a Serial Attached SCSI SAS port, leading to a NULL pointer dereference if the allocation fails. A local user could exploit this flaw under low-memory...

CVE-2026-98121

A flaw was found in the Linux kernel's Mstar MSC313e watchdog driver. The driver fails to properly set platform device data during device initialization. Consequently, when system power management routines attempt to access this data during suspend or resume operations, a NULL pointer dereference...

CVE-2026-93274

A flaw was found in the Linux kernel's Broadcom BCM2835 pin control driver. During device initialization, if pin controller registration fails, the driver attempts to remove an unregistered General Purpose Input/Output GPIO chip. This improper error handling leads to a null pointer dereference,...

CVE-2026-93273

A flaw was found in the Linux kernel's TPS6594 regulator driver. When configuring multi-phase regulators during device initialization, the driver fails to verify whether a device node exists before accessing it and fails to properly release acquired node references. A local attacker could exploit...

CVE-2026-42801

A flaw was found in ASR Crane and Falcon. This vulnerability, located in the asrrc module on Linux, is a NULL pointer dereference. An attacker could potentially exploit this to manipulate pointers, which may lead to unpredictable system behavior or a denial of service. Mitigation Mitigation for...

kernel: drm/amdgpu: Fix context pstate override handling

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

CVE-2026-93263

A flaw was found in the Linux kernel's ESWIN clock driver. Due to uninitialized stack memory during clock registration, leftover data can cause the clock framework to dereference an invalid pointer. This issue can trigger a kernel crash during device initialization, resulting in a Denial of Servi...

syzkaller

syzkaller - kernel fuzzer syzkaller siːzˈkɔːlə is an unsupervised coverage-guided kernel fuzzer. Supported OSes: FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, Windows. Mailing list: [email protected] join on web or by email. Found bugs: Darwin/XNU, FreeBSD, Linux, NetBSD, OpenBSD, Window...

CVE-2026-101017

A flaw was found in OpenDMARC. A NULL pointer dereference occurs in the strcasecmp call within libopendmarc/opendmarcpolicy.c during subdomain walking when processing Domain-based Message Authentication, Reporting, and Conformance DMARC records. A remote attacker could exploit this flaw by sendin...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

CVE-2022-38694_unlock_bootloader

CVE-2022-38694 Un atacante con acceso físico al dispositivo puede sobrescribir un puntero a función en algún lugar de la sección de datos de la BootROM o una dirección de retorno almacenada en la pila y ejecutar su propio código con privilegios de BootROM. Para obtener información detallada, lea ...

pe-bear

PE-bear PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files...

CVE-2021-28476

CVE-2021-28476: Microsoft Hyper-V: Multiple Vulnerabilities in vmswitch Multiple bugs are present in WPP code when handling set OID requests, one of them allowing to dereference read access an attacker controlled pointer, and the rest causing out of bounds read accesses. This repository contains...

ComfyEngine

ComfyEngine Qt-based memory scanner / watchlist playground inspired by Cheat Engine but built natively for Linux and tuned for my workflow: clean docks, pointer graphs, fast patching, and zero fear of losing context when you bounce between scanner, scripts, and notes. ComfyEngine gives you a clea...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ...

CVE-2022-37969

CVE-2022-37969 Windows Local Privilege Escalation PoC authors: Ricardo Narvaja & Daniel Kazimirow Solid For demonstration purposes only. Complete exploit works on vulnerable Windows 11 21H2 systems. Functional PoC based on previously published information by Zscaler Checkout the writeup...

CVE-2026-100890

A flaw was found in OpenDMARC. A remote attacker could cause a denial of service DoS by supplying specially crafted Sender Policy Framework SPF records. Due to improper input validation when parsing IPv6 addresses in the opendmarcspfipv6explode function, the application triggers a null pointer...

CVE-2026-100895

A flaw was found in OpenARC. A remote attacker can trigger a null pointer dereference by providing specially crafted input handled by the arcparsecanont function during canonicalization parsing. This issue causes the application to terminate unexpectedly, resulting in a Denial of Service DoS...

CVE-2015-8543_for_SLE12SP1

root@kitploit: $cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" root@kitploit: $id uid=1000jeremysp1 gid=100users groups=100users root@kitploit: $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i...

CVE-2019-10207

CVE-2019-10207 PoC para CVE-2019-10207 kernel de linux: bluetooth: hciuart: desreferencia de puntero NULL del kernel root@kitploit: gcc CVE-2019-10207.c -o cve-2019-10207-poc -static probado en 4.20.0 la compilación del kernel debe tener abiertos los CONFIG: root@kitploit: CONFIGBTHCIUARTMRVL=y...