
CVE-2026-34621
Research PoC demonstrating a prototype pollution and JavaScript injection chain in Adobe Acrobat Reader, enabling privileged JavaScript execution and…

Research PoC demonstrating a prototype pollution and JavaScript injection chain in Adobe Acrobat Reader, enabling privileged JavaScript execution and…

Technical analysis and PoC details for CVE-2020-1493, a zero-click Outlook RCE triggered by malformed MS-TNEF attachments leading to remote code…

Proof-of-concept exploit for OpenSSL CVE-2020-1967, a denial-of-service vulnerability in TLS 1.3 signature_algorithms_cert handling, with…

Chrome V8 RCE exploit for CVE-2021-30632 targeting Windows systems. Tested on Chrome 91-93. Includes JS POC and in-the-wild bug analysis reference.

Exploit analysis for CVE-2014-4378: information disclosure in Apple CoreGraphics via crafted PDF, enabling memory layout leak and bypass of ASLR,…

Analysis and proof-of-concept exploit code for CVE-2020-1054, a Windows kernel privilege escalation vulnerability, with technical write-up linked.

Exploit for CVE-2023-4427 targeting Chrome 117 V8, using many cross-origin iframes to brute-force ASLR and achieve code execution. Provides…

Technical analysis and proof-of-concept exploit for CVE-2023-20938, a use-after-free vulnerability in the Android kernel's Binder driver, enabling…

Proof-of-concept exploit for CVE-2025-6554, demonstrating V8 sandbox escape via addressof and fakeobj primitives to achieve arbitrary read/write.…

Deep-dive analysis and exploitation walkthrough of CVE-2016-4622, a WebKit JavaScriptCore memory disclosure vulnerability via Array.slice TOCTOU race…

Detailed technical analysis and proof-of-concept for Android CVE-2022-20474, a Bundle mismatch vulnerability exploiting LazyValue with negative…

Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore.

Analysis and exploitation of an use-after-free in ProFTPd

Proof-of-concept C code and writeups for disclosed Linux kernel vulnerabilities, including per-CVE exploit sources and technical analysis.

Proof-of-concept exploit for CVE-2024-6768, a Windows CLFS.sys driver vulnerability causing BSoD via crafted .BLF file. Includes source code and…

Technical analysis and proof-of-concept demonstrating a bypass of Linux kernel Spectre-BTI user-space mitigations via prctl and seccomp, with…

Java-based research harness for studying CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization, intended for…

Detailed write-up and proof-of-concept exploit for CVE-2021-4034 (PolKit pkexec local privilege escalation), including a Docker lab environment for…