
CVE-2022-22063
Security issue in the hypervisor firmware of some older Qualcomm chipsets

Security issue in the hypervisor firmware of some older Qualcomm chipsets

Threat model and vulnerability analysis of Contec SolarView Compact (CVE-2022-29303)

CVE-2022-34918 netfilter nf_tables 本地提权 POC

Full Chain Analysis of CVE-2022-4262, a non-trivial feedback slot type confusion in V8.

Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889.

cve-2022-42889 Text4Shell CVE-2022-42889 affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text version 1.10.


Exploit PoC for CVE-2022-29968 by Joseph Ravichandran and Michael Wang

ProVerif proof of concept of the Rollback attack on car keyfob (CVE-2022-37418, CVE-2022-36945 and CVE-2022-37305)

my personal exploit of CVE-2022-0847(dirty pipe)

HIP2022 presentation materials.

Demonstrates CVE-2022-34303 Secure Boot bypass via CryptoPro signed UEFI Shell, using the mm command to nullify gSecurity2 and load unsigned UEFI…

Exploit code for CVE-2022-22715 (Windows Dirty Pipe), a sandbox escape and privilege escalation via named pipe TOKEN object corruption, with a linked…

Demonstrates CVE-2022-34302, a Secure Boot bypass via the New Horizon Datasys signed bootloader whose built-in custom PE/COFF loader executes…

Reproduction of the Retbleed (CVE-2022-29900/29901) micro-architectural attack in gem5. RSB underflow, Flush+Reload side-channel leak, and a verified…

This repository is developed to analysis and understand DirtyPipe exploit CVE-2022-0847

Proof-of-concept exploit for CVE-2022-0847 (Dirty Pipe), a Linux kernel race condition enabling unprivileged writes to read-only files and privilege…

Tools for working with ImageMagick to handle arbitrary file read vulnerabilities. Generate, read, and apply profile information to PNG files using a…