ghostlock-sabrina

GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...

CVE-2023-20938

CVE-2023-20938 English Анализ уязвимости 1. Клиент A и клиент B устанавливают Binder-соединение через менеджер сервисов servicemanager. 2. A создаёт узел 0xbeef node = bindernewnodeproc, fp;, B ссылается на узел 0xbeef через ref-targetnode. 3. B корректно обрабатывает targetnode 0xbeef, помещая...

CVE-2026-46215-exploit-linux-7.0-uaf-stable

Эксплойт CVE-2026-46215 для Linux 7.0 — более стабильный и надёжный c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity Этот эксплойт работает в ограниченной среде, ознакомьтесь с требованиями ниже !!! ЧТО ЭТО ЗА ЧЁРТ ПОБЕРИ ? Это эксплойт дл...

CVE-2026-98283

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhvemulatetlbiealllpid kvmhvemulatetlbiealllpid iterates the nested-guest IDR and drops mmulock before calling kvmhvemulatetlbielpid, but does not hold a reference on the kvmnestedgues...

EUVD-2026-93211

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhvemulatetlbiealllpid kvmhvemulatetlbiealllpid iterates the nested-guest IDR and drops mmulock before calling kvmhvemulatetlbielpid, but does not hold a reference on the kvmnestedgues...

CVE-2026-98218

The Linux kernel contains a vulnerability where the function i2c_atr_add_adapter() stores a pointer to atr->adapter[chan_id] before calling i2c_add_adapter(). If i2c_add_adapter() fails, the channel is freed, but the slot remains pointing at the freed memory . This situation can result in a us...

EUVD-2026-93146

In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match child clients during registration. On failure the channel is freed but th...

Astra Linux – Vulnerability in Linux, Linux 5.10

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling ‘file’ pointer...

CVE-2026-46215-EXPLOIT

Exploit CVE-2026-46215 pour Linux 7.0 c0d3 par : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity Cet exploit fonctionne dans un environnement limité, vérifiez quelques prérequis ci-dessous !!! C'EST QUOI CE TRUC ? Ceci est un exploit pour...

CVE-2026-43499-S26

CVE-2026-43499 — эксплойт ядра Android GKI 6.12 pselect / configfs Эксплойт ядра Linux для линейки Android GKI 6.12 устройства Samsung и Pixel, нацеленный на CVE-2026-43499 : ошибочный откат removewaiter в rtmutexstartproxylock, который использует current вместо waiter::task, оставляя piblockedon...

CVE-2025-14321

CVE-2025-14321 Доказательство концепции Описание PoC для уязвимости Use-After-Free UAF в компоненте RTCEncodedFrameBase браузера Firefox, эксплуатируемой через API WebRTC Encoded Transforms. CVE-2025-14321 : Деструктор RTCEncodedFrameBase не вызывает DetachArrayBuffer при освобождении нативной...

CVE-2020-17057

Я написал этот эксплойт на основе этого блога（https://blogs.360.cn/post/CVE-2020-17057%20detail%20and%20exploit.html），но в итоге получил только объекты палитры с висячим указателем данных. Из-за изоляции типов я не могу получить произвольные примитивы чтения/записи с помощью объектов палитры или...

CVE-2026-43499-poc

Исследование по вооружению для CVE-2026-43499 ghostlock. ошибка пути прокси removewater в rtmutex, из-за которой piblockedon задачи остаётся висеть в её собственном вытесненном кадре стека ядра. Класс ошибки и оригинальная стратегия эксплойта принадлежат nebusec их статья здесь всё в этом...

CVE-2026-93207

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call component. Improper handling of credential data during the decoding process can lead to a dangling pointer, a form of memory corruption. This issue may allow a remote attacker to cause a denial of service by triggering early...

CVE-2026-23479-Redis-UAF-Proof-of-Concept

🔥 CVE-2026-23479 – Proof of Concept для UAF в Redis Использование после освобождения Use-After-Free в RedisunblockClientOnKey, ведущее к удалённому выполнению кода Proof of Concept с эксплуатацией при помощи GDB только для обучения / лабораторных работ 📖 Обзор CVE-2026-23479 — критическая...

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – Использование после освобождения в небезопасном веб-сервере на Rust Программный код Rust // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffer...

Rocky Linux 8 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (crlsa-2025_4362)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20254362 advisory. ghostscript: heap buffer over write vulnerability in GhostScript's lp8000printpage in gdevlp8k.c CVE-2020-27792 ghostscript: dangling pointer in...

CentOS Linux 7 [TuxCare] Security Update: unbound / unbound-devel / unbound-libs / unbound-python (CENTOS7:CLSA-2026:1779467345)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1779467345 advisory. - NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and...

Rocky Linux 9.6 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778054892)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778054892 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster ima...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc (ALMALINUX9.6:CLSA-2026:1783793262)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783793262 advisory. - In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter...