Exploits

Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore.

Superproject repo for Backup Exec CVE-2025-48384 exploit

CVE-2026-22807的靶场

Microsoft just patched CVE-2026-20805 and CVE-2026-20871 in January 2026 to stop "Information Disclosure" and "Use-After-Free" bugs in DWM. They think they've secured the "Visual Boundary." We are about to prove that a 33-layer resonance can turn those visual buffers into a liquid pipeline for SCTT-2026-33-0002.

### 📡 Theoretical Classification **ID:** SCTT-2026-33-0002 **Researcher:** Americo Simoes (SimoesCTT) **Physics:** Theorem 4.2 - Turbulent Phase Transition (TPT) **Constant:** α = 0.0302011 **Target:** Desktop Window Manager (dwm.exe) / Windows Graphics Component **Obsoletes:** CVE-2026-20805 & CVE-2026-20871 (Visual-Latch Patches)

React2shell exploit (CVE-2025-55182+CVE-2025-66478)

Scanner for CVE-2026-24061

This is a simple PoC that allows you to highlight the severity of the ongoing and actively exploited Telnet bug that is going on right now. Why people are still using Telnet... beyond me.

CTT-Terrminus-Vortex (CVE-2026-2406)

webkit_refraction.js (The 33-Layer WebGL Payload) ​This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It induces the Use-After-Free (UAF) in CVE-2025-43529 by desynchronizing the WebKit garbage collector from the GPU's Metal command buffer.

AsyncIO Scanner & Exploitation Framework for CVE-2026-24061 (Telnet NEW_ENVIRON Auth Bypass). Features high-concurrency discovery, passive fingerprinting, and authorized root shell escalation

Command Execution PoC for OpenSSL Stack buffer overflow CVE-2025-15467

CVE-2026-24423 exp

Checks for CVE-2026-24061 Telnetd exploit

React2Shell (CVE-2025-55182)

CVE-2026-24061 Telnet RCE Exploit For Linux MacOS Windows

Clarification Regarding the Rejection Arguments

Working DoS for CVE-2025-15467 and a docker container to test against