CVE-2022-38691_38692

CVE-2022-38691/38692 persistently boot FDL1/SPL without signature NOTE: first remove sign check of Boot Chain images in FDL1/SPL ​ fdl1 use genfdl1-dl sourcecode ​ spl android 9/10, use genspl-unlock-legacy sourcecode ​ spl android 11+, use genspl-unlock sourcecode ​ windows prebuilt tools can be...

CVE-2022-0185-Case-Study

CVE-2022-0185-Case-Study This case study is a result of an assignment of ECE 9069: Introduction to Hacking : https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 Overview CVE-2022-0185 is a heap-based buffer overflow flaw was found in the way the legacyparseparam function in the Filesyst...

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🚀 CVE-2024-41107...

acceleratortroll

AcceleratorTroll™ Abusing CVE-2023-28206 to make something useful. Roadmap Right now, we are still trying to understand how the vulnerability works and how to exploit it for anything other than panics. Prove that the vulnerability can be used to obtain kernel privileges. Obtain a krw exploit. Run...

super-tart-vphone-writeup

Building virtual iPhone using VPHONE600AP component of recently released PCC firmware Special Thanks / Acknowledgements dlevi309 Provided ideas for touch interaction on virtual iPhone khanhduytran0, 34306, asdfugil, verygenericname Provided other ideas for building virtual iPhone, including...

CVE-2026-101937

A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause a denial of service of the data plane via chassis-cluster fabric traffic...

CVE-2026-92154

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains a file size bounds bypass in Svc::FileUplink prior to version 4.2.0 . The vulnerability stems from an unsigned integer overflow during DATA packet validation , where the component uses wrapping U32 arith...

EUVD-2026-101489

A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause a denial of service of the data plane via chassis-cluster fabric traffic...

CVE-2026-101937 Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used

A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause a denial of service of the data plane via chassis-cluster fabric traffic...

CVE-2018-8897

CVE-2018-8897 Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. KVA Shadowing should be disabled and the relevant security update should be uninstalled. This may not work with certain hypervisors like VMWare, which discard the...

cve-2022-49186-research

CVE-2022-49186: Linux Kernel Privilege Escalation Research Overview Security research and proof-of-concept exploit for CVE-2022-49186, a Linux kernel vulnerability in the Visconti clock driver that enables local privilege escalation through array overflow. Vulnerability Details Type : Array...

CVE-2023-21768-DSE-Bypass

Forked This project was forked from: WindowsLPEAFDCVE-2023-21768 . Updates This project is updated from chompie1337 exploit and will disable DSE, load an unsigned driver and enable DSE...

CVE-2022-2869-detector

CVE-2022-2869 CodeQL Detector This project implements a general CodeQL detector for the root weakness behind CVE-2022-2869: an unsigned subtraction that may underflow because the program has not established a sufficient lower-bound/order guard before the arithmetic. Why this version is different...

GDRVLoader

GDRVLoader - Load Unsigned Drivers Windows 10-11 Originally based from https://github.com/fengjixuchui/gdrv-loader but with improvements and support for latest windows versions. Added Features Load unsigned drivers on Windows 10-11 without getting caught by PatchGuard. Improved portability throug...

CVE-2026-109373 ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie

ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies. Attackers can guess time-ordered session IDs around a victim's sign-in and supply them wi...

EUVD-2026-97671

ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies. Attackers can guess time-ordered session IDs around a victim's sign-in and supply them wi...

CVE-2026-109373

ZITADEL versions 3.0.0 before 4.19.2 are vulnerable to an authentication bypass in the Login V2 UI . The root cause allows unauthenticated attackers to forge unsigned session cookies by guessing time-ordered session IDs near a victim's sign-in. By supplying these IDs with empty tokens, attackers ...

CVE-2026-29000

CVE-2026-29000: pac4j JWT Authentication Bypass PoC Proof of Concept for CVE-2026-29000 - A critical authentication bypass vulnerability in pac4j JWT implementation that allows attackers to forge admin tokens without a valid signature. ⚠️ DISCLAIMER This tool is provided for educational and...

gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow

A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the blockrem variable, occurs when a user opens a specially crafted .psd image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource...

CVE-2023-52356-libtiff-analysis

CVE-2023-52356 – libtiff TIFFReadRGBATileExt Analysis Overview This lab analyzes CVE-2023-52356 in libtiff, focusing on the behavior of TIFFReadRGBATileExt when it receives image coordinates outside the valid image bounds. The analysis includes reproduction of the original crash, debugging with...