



Exploit for nginx heap buffer overflow (CVE-2026-42533) providing pre-auth RCE via two-pass capture clobbering. Includes info leak, heap spray, and…

Infoleak and PC control poc for CVE-2015-6620 (24445127), I'll add after conference

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox…

poc and vulnerability analysis of CVE-2017-0541

A buffer overflow vulnerability in the XNU kernel's ICMP error code causes IOS devices to crash (laptops and mobiles).


PoC CVE-2025-22457



My proof-of-concept exploits for the Linux kernel


Windows KASLR bypass using prefetch side-channel

Search for Unix binaries that can be exploited to bypass system security restrictions.

CVE-2019-0708 (BlueKeep)

CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.

Leaking kernel addresses from ETW consumers. Requires Administrator privileges.