CVE-2025-5777

CVE-2025-5777 - PoC утечки памяти Citrix NetScaler 📌 Описание Этот скрипт эксплуатирует критическую уязвимость раскрытия памяти в устройствах Citrix NetScaler ADC/Gateway, известную как CVE-2025-5777 также называемую CitrixBleed 2. Он вызывает утечку памяти через конечную точку...

Ticketbleed

Ticketbleed 이 도구는 TicketbleedCVE-2016-9244 취약점을 악용하기 위한 도구입니다. src 폴더 안에 있는 Ticketbleed 라이브러리는 Go의 crypto/tls를 수정한 버전으로, handshakeclient.go, tls.go, common.go 파일에 몇 가지 변경 사항이 있지만 거의 동일합니다. 빌드 root@kitploit: cd Ticketbleed mv Ticketbleed.go.tmp Ticketbleed.go go get github.com/EgeBalci/Ticketbleed...

CVE-2025-5419

CVE-2025-5419 Уязвимость неинициализированного чтения из-за некорректного Turboshaft Store-Store Elimination в V8. Этот репозиторий содержит анализ и стабилизированный эксплойт для повышения этой уязвимости до получения примитивов Arbitrary Read / Write, AddressOf и FakeObject внутри изолированно...

ctl_ctloutput-leak

ctlctloutput-leak Функция ctlctloutput в macOS High Sierra 10.13 игнорирует возвращаемое значение вызова sooptcopyin, что открывает окно состояния гонки для утечки неинициализированных данных кучи ядра в пользовательское пространство. ctlctloutput-leak — это proof-of-concept эксплойт, который...

CVE-2022-0847-Linux

CVE-2022-0847 Описание - POC для CVE-2022-0847: Уязвимость локального повышения привилегий в ядре Linux. - создано antx 2022-03-08. Подробности - Исследователь безопасности Макс Келлерманн ответственно раскрыл уязвимость «Dirty Pipe» и заявил, что она затрагивает ядро Linux 5.8 и более поздние...

SecDrvPoolLeak

SecDrvPoolLeak - CVE-2018-7250 PoC 설명 Microsoft Windows Vista, Windows 7, Windows 8, Windows 8.1 KB3086255 이전 버전 및 Macrovision SafeDisc에 포함된 secdrv.sys에서 문제가 발견되었습니다. IOCTL 0xCA002813에서 초기화되지 않은 커널 풀 할당으로 인해 로컬 권한이 없는 공격자가 초기화되지 않은 커널 PagedPool 데이터 16비트를 유출할 수 있습니다. 해당 취약점은 Microsoft에 보고되었으며, 업데이...

CVE-2022-0847

CVE-2022-0847 Описание - POC для CVE-2022-0847: Уязвимость локального повышения привилегий в ядре Linux. - создано antx 08.03.2022. Подробности - Исследователь безопасности Max Kellermann ответственно раскрыл уязвимость 'Dirty Pipe' и заявил, что она затрагивает Linux Kernel 5.8 и более поздние...

cve-2019-6207

CVE-2019-6207 root@kitploit: $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct...

CVE-2022-29968

CVE-2022-29968 Эксплойт Proof-of-concept для CVE-2022-29968 неинициализированная память в ядре Linux, а именно в системе iouring. Сбой был обнаружен с помощью Syzkaller. Проанализировали сбой Джозеф Равичандран и Майкл Ван. Эксплойт написан Джозефом Равичандраном. Мы нашли и сообщили об этой ошиб...

CVE-2026-89554

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. When reconstructing a Multipath TCP MPTCP join request under SYN cookies, the localid field is not properly initialized. An off-path attacker can influence this uninitialized field by sending concurrent MPJOIN SYN requests...

CVE-2026-89462

A flaw was found in the Linux kernel's power supply subsystem, specifically within the max17040 driver. This vulnerability occurs when the max17040getvcell and max17040getsoc functions fail to properly handle errors returned by regmapread during an I2C transfer. As a result, uninitialized registe...

CVE-2026-89483

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe subsystem. Under specific memory pressure conditions, a local user could trigger a scenario where uninitialized kernel memory is used and potentially exposed. This could lead to information disclosure, revealing sensitive dat...

CVE-2026-80956

A flaw was found in the Linux kernel's dm-pcache component. A crafted image can cause the getcachesegment function to return an uninitialized cache segment. This uninitialized segment, containing a null data pointer, is then used by cacheksetclose without a proper null check. This can lead to a...

CVE-2026-80927

A flaw was found in the Linux kernel. A race condition in the timekeeping subsystem, specifically within the doadjtimex function, can occur when the auxiliary clock is handled. This allows uninitialized stack data to be used in calculations and subsequently leaked to userspace, leading to...

CVE-2026-89618

A flaw was found in the Linux kernel's eventfs component. When the eventfscreatedir function fails due to memory pressure, an uninitialized internal data structure can cause the system to issue a misleading warning during the cleanup process. This incorrect error reporting could lead to confusion...

CVE-2026-80970

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA FireWire Control Protocol FCP subsystem. This vulnerability allows a local attacker to trigger the copying of uninitialized kernel memory to userspace. By sending a specially crafted short or zero-length data stage duri...

CVE-2026-89765

A flaw was found in the Linux kernel's timers/itimer component. On native sparc64 systems, the struct kerneloldtimeval contains uninitialized padding bytes. When putitimerval copies this structure to userspace, these padding bytes can be exposed, leading to information disclosure. This...

CVE-2026-89599

A flaw was found in the Linux kernel's fbdev: omapfb: panel-dsi-cm component. The dsicmprobe function registers a display before its associated lock mutex is properly initialized. This timing issue allows another process to attempt to acquire the uninitialized mutex, which could lead to system...

CVE-2026-80967

A flaw was found in the ALSA pcxhr driver within the Linux kernel. The pcxhrprobe function requests a threaded interrupt before properly initializing a critical mutex mgr-lock. This oversight could allow an early interrupt to operate on an uninitialized mutex, potentially leading to system...

CVE-2026-89505

A flaw was found in the Linux kernel's RDMA/uverbs component. Malformed input from a provider in the legacy write path can cause the uverbsgethandlerfn function to dereference an uninitialized pointer. This can lead to a system crash, resulting in a denial of service...