EUVD-2026-125238

NocoDB before 2026.08.0 contains an incorrect authorization vulnerability that lets base-scoped API tokens act as account-wide credentials because the token's baseid is never stored or checked. Attackers holding a leaked token can read, write and delete records on every base the token owner belon...

CVE-2026-126283

NocoDB versions before 2026.08.0 are vulnerable to an incorrect authorization flaw involving base-scoped API tokens . The root cause is that the system fails to store or verify the base_id associated with these tokens, allowing them to function as account-wide credentials . An attacker who obtain...

weightBufs

WeightBufs: WeightBufs is a kernel r/w exploit for all Apple devices with Neural Engine support. Bugs and Exploit by @simo36, you can read my presentation slides at POC for more details about the vulnerabilities and the exploitation techniques. The exploit doesn't rely on any hardcoded address or...

CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized testing. 📋 Description CVE-2026-11645 is an out-of-bounds read and write OOB vulnerability in the V8 engine of Google Chrome. A remote attacker can execute arbitrary cod...

CVE-2026-56129

Description Arbitrary physical memory read/write using Toshiba qiomem.sys from ring 3 only works upto 4GB physical addresses. Driver is distributed via Microsoft Update Catalog. Other variants. Not listed on Microsoft Vulnerable Driver List, no previous CVE alloted. first run acpi.exe to create t...

cve-2018-4233

CVE-2018-4233 Exploit for CVE-2018-4233, a bug in the JIT compiler of WebKit. Tested on Safari 11.0.3 on macOS 10.13.3. For more details see https://saelo.github.io/presentations/blackhatus18attackingclientsidejitcompilers.pdf The exploit gains arbitrary memory read/write by constructing the addr...

EUVD-2026-124829

Software installed and run as a non-privileged user may conduct improper GPU system calls to the execution of an error path that triggers an OOB read & write. An error can be triggered which causes the index of the array element to be cleaned up by the error path would be outside of the array...

SiYuan - SQL Execution

SiYuan = v3.7.2 contains a SQL injection caused by passing client-supplied SQL statements verbatim to the main read-write database handle in /api/search/searchEmbedBlock, letting attackers with publish RoleReader token or anonymous access read and modify content, exploit requires publish RoleRead...

Apache DolphinScheduler >= 3.1.0, < 3.2.2 Resource File Read And Write

File read and write vulnerability in Apache DolphinScheduler, authenticated users can illegally access additional resource files. This issue affects Apache DolphinScheduler from 3.1.0 before 3.2.2. id: CVE-2024-30188 info: name: Apache DolphinScheduler = 3.1.0, 3.2.2 Resource File Read And Write...

qu1ckr00t

qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...

CVE-2020-15368

How to exploit a vulnerable windows driver Exploit and Proof of Concept PoC for CVE-2020-15368. Asrock repackaged rweverything driver for their RGB controller configuration tool and signed it. They "protect" it by encrypting their ioctls...lol. We found this CVE by accident last summer, and afaik...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as well as an arbitrary object address leak in wkexploit.js. It will then...

CVE-2026-41473-CyberPanel-AI-Scanner-Unauth

CVE-2026-41473 — CyberPanel AI Scanner Unauthenticated Read/Write API Access Nuclei detection template for CVE-2026-41473 affecting CyberPanel versions before 2.4.4. Vulnerability CyberPanel's AI Scanner feature exposes two API endpoints without authentication: Endpoint| Method| Impact ---|---|--...

smbeagle

/ \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle is a cross-platform SMB fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be...

ZeroHVCI

ZeroHVCI - Defeating HVCI without admin privileges or a kernel driver ZeroHVCI accomplishes arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity HVCI protected environments calling without admin permissions or kernel drivers. Features Full non-privileged kernel...

CVE-2026-78938

CVE-2026-78938 — V8 TurboFan CheckMaps instance-migration type confusion Root-cause analysis and exploit for CVE-2026-78938, a type confusion in V8's TurboFan load elimination that was fixed in Chrome 152.0.7977.64 V8 15.2.124.18. The bug was reported as exploited in the wild. The exploit turns t...

CVE-2021-21551

CVE-2021-21551 Proof of concept exploit for CVE-2021-21551, vulnerability comes from user provided addresses being provided as arguments to a memmove call allowing for an arbitary read/write ioctls 0x9B0C1EC4 and 0x9B0C1EC8 as well as the physical address parameter for a MmMapIoSpace call that...

CVE-2022-23222

CVE-2022-23222 Chinese writeup: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps' running + phase1/8 'create bpf maps'...

kfd

Quick disclaimer: I have no intention of adding offsets for other devices and iOS versions. kfd kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices. It leverages various vulnerabilities that can be exploited to obtain dangling PTEs, which will be...

pois0nSword

pois0nSword In development, not currently useful for users. Currently a demonstration of arbitrary webcontent read write using cve-2025-43529 on iOS 26.1. As well as a PAC bypass utilizing CVE-2026-20700. Credits: GenericCoding - main developer varik - main developer zeroxjf - fixing webcontent r...