CVE-2024-7966

The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and executable scripts.

This PoC exploits a vulnerability in Chrome's Skia graphics engine (CVE-2024-7966) by generating a malformed Skia Picture (SKP) file that triggers a GPU process crash. The exploit involves crafting a malicious SKP file with a large shader payload to exploit a deserialization issue.