
ctl_ctloutput-leak
CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.

CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.

Kernel Information Disclosure

Exploit analysis for CVE-2014-4378: information disclosure in Apple CoreGraphics via crafted PDF, enabling memory layout leak and bypass of ASLR,…

Proof-of-concept exploit for CVE-2021-31955, a Windows kernel information disclosure vulnerability. Demonstrates exploitation on 64-bit systems to…

Exploit for CVE-2023-21688 combining a side-channel information leak with a use-after-free (UAF) chain for kernel privilege escalation.

Exploit for CVE-2019-6207: kernel heap information leak in getdirentriesattr on macOS <=10.14.4 and iOS <12.2, triggerable from sandbox.

Technical analysis of CVE-2020-1206 (SMBleed) kernel information disclosure vulnerability in Windows SMBv3, including unauthenticated memory leak…

Proof-of-concept exploit for Linux kernel FUSE information leak (CVE-2024-44947), demonstrating beyond-EOF memory disclosure via mmap and including…

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64,…

Information and PoC about the ENLBufferPwn vulnerability

Array.prototype.slice wrong alias information.

Exploit for Adobe Reader DC out-of-bounds read vulnerability (CVE-2021-45067) that leaks sensitive information from the sandboxed process via…

Proof-of-concept exploit for CVE-2022-1972, a kernel information leak in the Netfilter subsystem. Demonstrates unprivileged user namespace…

A collection of resources and information about CVE-2023-2033

Proof-of-concept exploit for CVE-2026-14669, a PostgreSQL to_char() timezone abbreviation heap buffer overflow enabling RCE through information leak…

C-based proof-of-concept exploit for CVE-2022-4543 (EntryBleed), a Linux kernel vulnerability enabling information disclosure and potential privilege…

Exploit code for CVE-2020-8835, a Linux kernel information disclosure vulnerability, demonstrating the flaw and its exploitation.

Multiple untrusted search path vulnerabilities in MicroStation 7.1 allow local users to gain privileges via a Trojan horse (1) mptools.dll, (2)…