https://poc.intelseclab.com/tags/aslr-bypass/Latest proof-of-concept entries.Hugoen-usSun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-16_cve-2026-42533-nginx-pcre-heap-overflow-rce/Sun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-16_cve-2026-42533-nginx-pcre-heap-overflow-rce/Critical severity (CVSS 9.8) — web · CVE-2026-42533. Status: Patched. Affects: nginx 1.30.1 (and likely earlier versions). Tags: nginx, pcre, heap-overflow, rce, preauth, info-leak, capture-variable, map-directive, aslr-bypass, CVE-2026-42533.webCriticalnginxpcreheap-overflowrcepreauthinfo-leakcapture-variablemap-directiveaslr-bypassCVE-2026-42533https://poc.intelseclab.com/pocs/binary/2026-08-09_mariadb-low-priv-rce-st-area-cursor-uaf/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-08-09_mariadb-low-priv-rce-st-area-cursor-uaf/Critical severity (CVSS 8.8) — binary · MDEV-40328 (ST_Area OOB read); cursor-array UAF has no assigned CVE yet. Status: Unpatched. Affects: MariaDB Server, ST_Area() geometry function and SYS_REFCURSOR cursor-array management. Tags: mariadb, database, rce, low-privilege, heap, oob-read, use-after-free, aslr-bypass, pie-bypass, coop, vtable, cursor, st-area, multipolygon, CWE-125, CWE-416, docker, v12-security.binaryCriticalmariadbdatabasercelow-privilegeheapoob-readuse-after-freeaslr-bypasspie-bypasscoopvtablecursorst-areamultipolygonCWE-125CWE-416dockerv12-securityhttps://poc.intelseclab.com/pocs/web/2026-07-27_gitlab-oj-json-parser-rce-chain/Mon, 27 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-27_gitlab-oj-json-parser-rce-chain/Critical severity — web · N/A (no CVE assigned as of 2026-07-27 — researcher disclosure via depthfirst.com blog, covered by The Hacker News). Status: Weaponized. Affects: GitLab Community/Enterprise Edition — Jupyter notebook diff rendering (backed by the Oj native Ruby JSON parser gem). Tags: gitlab, oj-gem, json-parser, rce, aslr-bypass, ruby, deserialization, no-cve-yet.webCriticalgitlaboj-gemjson-parserrceaslr-bypassrubydeserializationno-cve-yethttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-2005-postgresql-pgcrypto-heapoverflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-2005-postgresql-pgcrypto-heapoverflow/Critical severity — binary · CVE-2026-2005. Status: PoC. Affects: PostgreSQL pgcrypto extension (PGP session-key parsing). Tags: postgresql, pgcrypto, heap-overflow, aslr-bypass, privilege-escalation, pgp, memory-corruption.binaryCriticalpostgresqlpgcryptoheap-overflowaslr-bypassprivilege-escalationpgpmemory-corruptionhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9256-nginx-poolslip-rift-rce-chain/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9256-nginx-poolslip-rift-rce-chain/Critical severity — web · CVE-2026-9256 ("PoolSlip"), chained with CVE-2026-42945 ("rift"). Status: PoC. Affects: nginx (rewrite engine). Tags: nginx, heap-overflow, heap-over-read, aslr-bypass, rce, rewrite-engine, request-smuggling-adjacent, chained-exploit.webCriticalnginxheap-overflowheap-over-readaslr-bypassrcerewrite-enginerequest-smuggling-adjacentchained-exploithttps://poc.intelseclab.com/pocs/binary/2026-07-03_objdump-dlx-elf-backend-oob/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_objdump-dlx-elf-backend-oob/Medium severity — binary · None assigned as of 2026-07-03. Status: PoC. Affects: GNU Binutils objdump — DLX ELF backend (elf32-dlx). Tags: binutils, objdump, elf-parsing, dlx, out-of-bounds-write, aslr-bypass, local-code-execution, crash-to-calc.binaryMediumbinutilsobjdumpelf-parsingdlxout-of-bounds-writeaslr-bypasslocal-code-executioncrash-to-calc