CVE-2023-25136_POC

CVE-2023-25136 POC POC For A Pre Auth Double Free Vulnerability Affecting OpenSSH 9.1 To 9.2 Neccessary libraries Please make sure you have the following dependencies installed: Python 3 duh termcolor argparse fabric You can also install these libraries directly from the included requirements.txt...

CVE-2019-11932

CVE-2019-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

CVE-2026-104192

Prior to version 1.40 , the Dragonfly in-memory data store is vulnerable to a double-free issue in OpaqueObjLoader::CreateStream within src/server/rdb_load.cc. The flaw occurs when one streamNACK is associated with both a consumer group's global PEL and a consumer-local PEL; the system frees the ...

CVE-2026-90162

A flaw was found in ksmbd, a kernel module for SMB3 protocol support in the Linux kernel. A race condition exists in the smb2lock function, where a lock object can be freed while still being referenced, known as a Use-After-Free, and then freed again, known as a Double-Free. This occurs when...

Microsoft Office Excel Remote Code Execution Vulnerability

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network...

Microsoft Office Outlook Remote Code Execution Vulnerability

Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

Windows Shell Remote Code Execution Vulnerability

Double free in Windows Shell allows an unauthorized attacker to execute code over a network...

Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Elevation of Privilege Vulnerability

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Windows libarchive Remote Code Execution Vulnerability

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network...

CVE-2026-109943

FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or PolygonCB points array when numPoints is zero, so both the queue consumer and parser cleanup free it. A malicious RDP server can send a point-bearing...

CVE-2026-109943

FreeRDP versions 3.29.0 before 3.32.0 are vulnerable to a double free vulnerability in the client's async-update message proxy . The root cause occurs when the proxy shallow-copies the parser-owned PolygonSC or PolygonCB points array while numPoints is zero, leading to both the queue consumer and...

CVE-2026-23918

CVE-2026-23918: Apache HTTP/2 Double-Free DoS CVE-2026-23918 | Apache HTTP Server 2.4.66 | CWE-415: Double Free | CVSS 8.8 | Fixed in 2.4.67 A double-free vulnerability in modhttp2 h2mplx.c allows remote attackers to cause a denial of service worker crash via rapid RSTSTREAM frames that trigger a...

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 vulnerability mass scan and exploit Description OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default...

jfrog-CVE-2023-25136-OpenSSH_Double-Free

CVE-2023-25136 Proof-of-Concept Overview This is a DoS Proof-of-Concept of OpenSSH 9.1p1 Double-Free Vulnerability CVE-2023-25136. It will trigger the double-free and cause an abort crash. For a comprehensive understanding, check out the accompanying blog post for in-depth details. Dependencies...

CVE-2026-109257

A flaw was found in FreeRDP. A remote attacker using a specially crafted Remote Desktop Protocol RDP client can request NSCodec compression with large display dimensions to trigger a memory allocation failure on the server. Because the server fails to properly clear memory pointers during error...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution TL;DR. A malformed DUMP payload passed to RESTORE triggers a heap double-free in Redis's legacy hash-zipmap loader. Under default jemalloc the double-free is silent the server keeps running, which turns it into a controllab...

CVE-2025-62215-POC

CVE-2025-62215 — Windows Token UAF SepTokenSidSharingEnabled Race Condition This repository is for educational and research purposes only. Overview A Use-After-Free vulnerability PoC that occurs in the SepTokenSidSharingEnabled optimization path of the Windows kernel. When NtDuplicateToken...

CVE-2023-25136

OpenSSH Pre-Auth Double Free CVE-2023-25136 POC This repository contains a Proof of Concept POC script to check for the OpenSSH Pre-Auth Double Free vulnerability CVE-2023-25136 using the Paramiko library in Python. Prerequisites Before running this POC script, you need to make sure you have the...