The Wayback Machine - https://web.archive.org/web/20210201064518/https://github.com/lockedbyte/CVE-Exploits
Skip to content

/ CVE-Exploits

PoCs for public CVE's I have been working on.

335 stars 71 forks
Star
Watch
master
1 branch 0 tags
Go to file
Code
Clone

Use Git or checkout with SVN using the web URL.

Latest commit

@lockedbyte
lockedbyte Merge pull request #5 from centromere/patch-1
2823d2d Jan 30, 2021
Merge pull request #5 from centromere/patch-1 
Fix typo
2823d2d

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
CVE-2019-18634
-
Jan 28, 2021
CVE-2021-3156
Fix typo
Jan 30, 2021
jad_1.5.8e_oob_write
-
Jan 28, 2021
README.md
-
Jan 30, 2021

README.md

CVE Exploit PoCs

Some PoCs for public CVEs I have been working on.

Current exploits

  • CVE-2019-18634: Stack-based buffer overflow in sudo tgetpass.c when pwfeedback module is enabled
  • CVE-2021-3156: Heap-based buffer overflow in sudo sudoers.c when an argv ends with backslash character.
  • jad OOB write: JAD out-of-bounds write leading to code execution (No CVE given yet)

About

PoCs for public CVE's I have been working on.

Resources

Readme

Releases

No releases published

Packages

No packages published

Contributors 3

Languages