
DrayTek-Exploit
CVE-2022-23093 FreeBSD Stack-Based Overflow

CVE-2022-23093 FreeBSD Stack-Based Overflow
Exploit for CVE-2022-22555, a Linux kernel heap buffer overflow vulnerability enabling local privilege escalation. Includes proof-of-concept code and…

Heap corruption in WhatsApp's media picker

Technical notes and debugger analysis for CVE-2014-4140, a use-after-free vulnerability in MSHTML's CHtmRootParseCtx::AddText leading to remote code…

Technical analysis and proof-of-concept for CVE-2017-16943, a use-after-free in Exim's receive_msg function, demonstrating heap manipulation and RIP…

Exploit for CVE-2010-3904, a Linux kernel privilege escalation vulnerability. Provides a proof-of-concept implementation for local privilege…

Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen


A deadlock on the mmap semaphore ‘mmap sem’ in the CentOS 3.9 kernel, that is triggered by a specific interleaving of concurrent threads, one calling…



Demonstrates type confusion and heap overflow exploits for CVE-2015-4843 in Java, with demos for aarch64 and Morello, highlighting CHERI capability…

PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"

Dump the memory of a PPL with a userland exploit

Shellcode injection technique. Given as C++ header, standalone Rust program or library.

Proof-of-concept demos and libkdump library demonstrating the Meltdown microarchitectural attack, leaking kernel and physical memory on vulnerable…

ASLR-independent nginx RCE chain PoC combining the PoolSlip heap over-read leak (CVE-2026-9256) with the rift overflow (CVE-2026-42945) to reach…

PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.