kartlanpwn
chadhyatt/kartlanpwnTechnical analysis and proof-of-concept for CVE-2024-45200, a stack-based buffer overflow in Mario Kart 8 Deluxe's Pia P2P networking library,…
binary-exploitationeducationexploitation+2
65
chadhyatt/kartlanpwnTechnical analysis and proof-of-concept for CVE-2024-45200, a stack-based buffer overflow in Mario Kart 8 Deluxe's Pia P2P networking library,…
dinosn/liferay-ga4-rce-researchSecurity research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known…
lwzsoviet/cve-2021-3281Proof-of-concept for CVE-2021-3281: directory traversal vulnerability in Django's TarArchive utility via crafted tar files, with Python tarfile…
amit-raut/cve-2016-4117-reportA brief report on CVE-2016-4117 (A vulnerability in Adobe Flash)
vardhan0257/upb-any-recursion-auditAudit harness testing whether the CVE-2026-0994 Any-unwrapping recursion bug class affects upb's C core in Ruby and PHP protobuf bindings, with…
jfrog/jfrog-cve-2023-25136-openssh_double-freeProof-of-concept exploit triggering a double-free vulnerability (CVE-2023-25136) in OpenSSH 9.1p1, causing a denial-of-service crash via pre-auth…
joakimbulow/cve-2026-24688Proof-of-concept exploit for CVE-2026-24688, a denial-of-service vulnerability in pypdf's outline parsing. Includes malicious PDF generator and…
raafatabualazm/streambox-cve-2026-28618Redacted notes on CVE-2026-28618 / StreamBox APV lab — heap write into a session object via FRAME height mismatch
0xcyberstan/cve-2026-59346-pocPoC for CVE-2026-59346 - 32-bit integer overflow in VMware's VMXNET3 TSO segmentation path, guest-to-host crash.
theopaid/cve-2026-66729-out-of-bounds-read-in-facil.io-mime-parser-leads-to-server-crashSecurity Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash
kpatsakis/cve-2026-36834Reproducible CVE-2026-36834 proof-of-concept demonstrating an out-of-bounds array read in LibRaw's Panasonic RW2 decoder, with mutation script and…
parapapinho/cve-2017-12561Reverse-engineering write-up and proof of concept for CVE-2017-12561, a use-after-free in HPE iMC dbman, covering binary diffing, ASN.1 decoding, and…
r3n3r0/cve-2026-0049PoC and analysis of a zero-click DoS in Android's DNG SDK, with crafted DNG samples, an NDK crash harness, and UBSan/IntSan reproduction of the…
hyperps/cve-2026-0897Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms…
canomer/cve-2025-54110-kernel-eop-pocProject Date : Oct 2025 / PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows `NtQueryDirectoryObject`…
oscerd/cve-2026-79986Reproducer and analysis for CVE-2026-79986, a path traversal in Apache Camel camel-azure-files where share listing names escape the polled directory.
pedrobarcha/memory-injectionResearch on persistent prompt injections via memory features in Claude, Gemini, and ChatGPT, with reproduction steps, datasets, and proofs for…
mk-ultra-project-monarch/cve-2017-7921-writeup-2026Vulnerability research write-up on CVE-2017-7921 — a critical unauthenticated auth bypass in Hikvision IP cameras/DVRs/NVRs, covering root cause,…