
CVE-2021-28476
Proof-of-concept exploit for CVE-2021-28476, a Microsoft Hyper-V vmswitch vulnerability allowing attacker-controlled pointer dereference and…

Proof-of-concept exploit for CVE-2021-28476, a Microsoft Hyper-V vmswitch vulnerability allowing attacker-controlled pointer dereference and…

Simple poc of CVE-2018-8353 Microsoft Scripting Engine Use After Free

CVE-2022-25943

Technical analysis of CVE-2017-0037, a Microsoft browser memory corruption vulnerability enabling remote code execution via type confusion in CSS/JS…


Proof-of-concept exploit for CVE-2023-21716, a critical remote code execution vulnerability in Microsoft Word. Demonstrates exploitation of the…

Proof Of Concept for CVE-2023-21716 Microsoft Word Heap Corruption

Proof of concept for CVE-2026-54992, an MSMQ remote-read integer overflow

Proof-of-concept exploit for CVE-2012-0003, a remote code execution vulnerability in Microsoft Windows Media Player. Demonstrates exploitation of a…

Proof-of-concept for CVE-2026-43494 (PinTheft): Linux LPE via RDS zerocopy refcount bug + io_uring fixed buffers → SUID page-cache overwrite.…

Proof-of-concept for CVE-2026-43494 (PinTheft): Linux LPE via RDS zerocopy refcount bug + io_uring fixed buffers → SUID page-cache overwrite.…

Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.

🆘New Windows Kernel Priviledge Escalation Vulnerability

Technical analysis and reproduction of CVE-2023-21716, a critical heap-based buffer overflow in Microsoft Word's RTF parser, including root cause,…

Microsoft Outlook Remote Code Execution Vulnerability

Conference talk analyzing CVE-2018-8453, a Windows kernel UAF and double-free vulnerability. Covers binary diffing, exploit reproduction, heap spray,…

Proof-of-concept for CVE-2026-43494 (PinTheft): Linux kernel local privilege escalation exploiting an RDS zerocopy reference-count bug with io_uring…

Reverse engineering and vulnerability research on CVE-2023-36802, focusing on object type confusion in mksssrv.sys.