CVE-2026-46215-exploit-linux-7.0-uaf-stable

CVE-2026-46215 Exploit pour Linux 7.0 - Plus stable et fiable c0d3 par : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity Cet exploit fonctionne dans un environnement limité, vérifiez quelques exigences ci-dessous !!! QU'EST-CE QUE C'EST QUE CE TRUC...

CVE-2023-20938

CVE-2023-20938 English تحليل الثغرة 1. يقوم العميل A والعميل B بإنشاء اتصال Binder عبر مدير السياق servicemanager 2. ينشئ A العقدة 0xbeef bindernewnode، ويشير B إلى العقدة 0xbeef عبر ref-targetnode 3. يقوم B أولاً بمعالجة targetnode 0xbeef بشكل صحيح، ويخزن bindertransaction الذي يشير إلى targetno...

CVE-2020-17057

Ich habe diesen Exploit auf Basis dieses Blogs https://blogs.360.cn/post/CVE-2020-17057%20detail%20and%20exploit.html geschrieben, aber am Ende habe ich nur Palettenobjekte mit einem verwaisten Datenzeiger erhalten. Aufgrund der Typisolierung kann ich mit Paletten- oder Bitmapobjekten keine...

CVE-2025-14321

CVE-2025-14321 Preuve de concept Description PoC pour une vulnérabilité Use-After-Free UAF dans le composant RTCEncodedFrameBase de Firefox, exploitable via l'API WebRTC Encoded Transforms. CVE-2025-14321 : Le destructeur de RTCEncodedFrameBase n'appelle pas DetachArrayBuffer lors de la libératio...

CVE-2026-23479-Redis-UAF-Proof-of-Concept

🔥 CVE-2026-23479 – Redis UAF Proof of Concept Use-After-Free in RedisunblockClientOnKey führt zu Remote Code Execution Proof of Concept mit GDB-unterstützter Ausnutzung nur zu Bildungs-/Laborzwecken 📖 Überblick CVE-2026-23479 ist eine kritische Use-After-Free UAF -Schwachstelle in Redis-Versionen...

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – असुरक्षित वेब सर्वर में Rust Use‑After‑Free प्रोग्राम कोड Rust root@kitploit: // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffer data: Vec,...

CVE-2026-46215-EXPLOIT

CVE-2026-46215 Exploit per Linux 7.0 c0d3 di : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity Questo exploit funziona in un ambiente limitato, controlla alcuni requisiti qui sotto !!! COSA CAVOLO È QUESTO ? Questo è un exploit per CVE-2026-46215...

CVE-2026-74688

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability arises when the sctpmakeheartbeatack function caches a destination transport without taking a proper reference. If the associated peer transport is removed while a HEARTBEAT ACK chu...

CVE-2026-74614

A flaw was found in the Linux kernel's vsock/virtio component. During system suspend and resume operations, a worker process might incorrectly retain a pointer to a deleted virtual queue while observing a replacement queue's running state. This inconsistent state can lead to system instability or...

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SUSE CVE-2026-74587

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctpasconfqueueteardown...

CVE-2026-74588

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsngapacked...

CVE-2026-74688 sctp: clear control chunk transport if it is being removed

In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the destination transport in chunk-transport without taking a reference. When srcoutofasocok is enabled, the HEARTBEAT ACK may remain queued o...

CVE-2026-74688

A use-after-free vulnerability in the Linux kernel's SCTP implementation. The function sctp_make_heartbeat_ack() caches a destination transport pointer without taking a reference. When src_out_of_asoc_ok is enabled, a HEARTBEAT ACK may remain queued on control_chunk_list. If the peer transport is...

EUVD-2026-64375

In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the destination transport in chunk-transport without taking a reference. When srcoutofasocok is enabled, the HEARTBEAT ACK may remain queued o...

CVE-2026-74588 sctp: keep chunk->transport in step with the list it is queued on

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsngapacked...

EUVD-2026-64525

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsngapacked...

CVE-2026-74588 sctp: keep chunk->transport in step with the list it is queued on

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsngapacked...

CVE-2026-74588

CVE-2026-74588 is a use-after-free in the Linux kernel's SCTP implementation. In __sctp_outq_flush_rtx(), a gap-acked chunk is moved to another transport's transmitted list via list_move_tail() without updating chunk->transport. If the original transport is freed (triggered by an ASCONF Delete...

CVE-2026-74587 sctp: fix use-after-free of cached ASCONF chunk

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctpasconfqueueteardown...