CVE-2024-50804

CVE-2024-50804 Writeup can be found on my blog below. Thanks! https://g3tsyst3m.github.io/cve/msi/Arbitrary-Write-Privilege-Escalation-CVE-2024-50804/...

CVE-2019-9791

Cadena de exploits para CVE-2019-9791 y CVE-2019-11708 contra Firefox 65.0 Funciona contra Firefox 65.0 en Windows 64 bits. La parte de CVE-2019-11708 está tomada del exploit de 0vercl0k: https://github.com/0vercl0k/CVE-2019-11708 El exploit utiliza CVE-2019-9791 para obtener una primitiva de...

extra_recipe

// ianbeer Exploit arbitrario de lectura/escritura del kernel para CVE-2017-2370 en iOS 10.2 Solo probado en iPod Touch 6G 14C92 - ¡otros dispositivos/firmwares no funcionarán tal cual! el bug machvoucherextractattrrecipetrap es una trampa mach que puede ser llamada desde cualquier contexto. Es...

CVE-2026-40369

This is a rewrite and summary of VoidSec’s public technical analysis of CVE-2026-40369, with an added flowchart and defensive notes for my own understanding. All core technical details come from his research. I did not perform independent reverse engineering on this bug. CVE-2026-40369: Defensive...

GhostLock-GOT-W29

CVE-2026-43499 GhostLock — HUAWEI MatePad Pro 11 GOT-W29 Ricerca di escalation dei privilegi per CVE-2026-43499 rtmutex/futex-PI UAF, "GhostLock" su GOT-W29 HarmonyOS 4.0, kernel 4.19.157-perf+. Conclusioni principali : La primitive di scrittura della vulnerabilità è stata verificata con successo...

ghostlock-pfem10

GhostLock — PFEM10 Exploit per CVE-2026-43499 IonStack per OPPO Find X5 Pro PFEM10. Kernel 5.10.236-android12-9-o, UAF su futex CMPREQUEUEPI → primitiva di scrittura pi-tree. Usalo a tuo rischio. Aspettati panics / riavvii. Non aggiornare il firmware. Build root@kitploit: ./build.sh richiede...

Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation

Exploit del client VPN Ivanti/Pulse di CVE-2023-35080 che porta a un'escalation dei privilegi Codice relativo allo sfruttamento della CVE-2023-35080 che sfrutta una primitiva di scrittura nel driver del kernel del client VPN Ivanti/Pulse su Windows. La primitiva di scrittura porta a un'escalation...

RtlHijack

RtlHijack Un repository con script per dimostrare primitive di lettura e scrittura alternative utilizzando le funzioni Rtl in modo non convenzionale. RtlFillMemory.c RtlFillMemory accetta tre argomenti: un puntatore alla memoria di destinazione, il numero di byte da scrivere e un singolo valore...

CVE-2026-81334

darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknetnetwork.cpp as xcallocnet.n, sizeofDarknet::Layer, sized to exactly the number of layer sections the file declares. The shortcu...

copyfailautopatch

copyfailautopatch Rileva e opzionalmente mitiga la CVE-2026-31431 "Copy Fail" su un host Linux. La vulnerabilità è una primitiva di scrittura nella page cache raggiungibile tramite la famiglia di socket AFALG usando la trasformazione AEAD authencesnhmacsha256,cbcaes. Questo script riproduce la...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post-Exploitation-Technik, um beliebige Kernel-Schreibvorgänge / Inkremente in eine vollständige Lese-/Schreib-Primitive auf Windows 11 22H2+ umzuwandeln. Dieser PoC verwendet den HackSysExtremeVulnerableDriver. Der PoC unterstützt sowohl beliebiges Schreiben als auch...

ANT-2026-KRKYEBGE · nftables · write-primitive

other high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-KRKYEBGE: write-primitive in nftables In jsonparsemapstmt, the parser...

CVE-2026-73148

GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2026-40369: Defensive Analysis of the 12-Byte Windows Kern...

CVE-2026-44633

Live Helper Chat 4.84v REST API chat update endpoint is vulnerable: a REST user with lhchat/use can update a chat in a department they cannot read, accepting arbitrary chat object fields to alter hash and status and potentially tamper via visitor/widget paths. The same write primitive can set ope...

Exploit for Out-of-bounds Read in Microsoft

!CVEhttps://img.shields.io/badge/CVE-2025--60709-FF0000?styl...

CVE-2025-58762 Tautulli vulnerable to Authenticated Remote Code Execution via write primitive and `Script` notification agent

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. In Tautulli v2.15.3 and earlier, an attacker with administrative access can use the pmsimageproxy endpoint to write arbitrary python scripts into the application filesystem. This leads to remote code execution when...

BIT-TENSORFLOW-2022-23566 Out of bounds write in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in Grappler. The setoutput function writes to an array at the specified index. Hence, this gives a malicious user a write primitive. The fix will be included in TensorFlow 2.8.0. We will also...

Out of bounds write in Tensorflow

Impact TensorFlow is vulnerable to a heap OOB write in Grappler: cc Status SetUnknownShapeconst NodeDef node, int outputport shapeinference::ShapeHandle shape = GetUnknownOutputShapenode, outputport; InferenceContext ctx = GetContextnode; if ctx == nullptr return errors::InvalidArgument"Missing...

Out of bounds write in TFLite

Impact An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive under certain conditions. Patches We have patched t...