CVE-2025-62215_Windows_Kernel_PE

CVE-2025-62215 익스플로잇 PoC 원본 코드 출처: https://github.com/dexterm300 🧨 설명 이 저장소에는 CVE-2025-62215 에 대한 개념 증명 익스플로잇이 포함되어 있습니다. 이 취약점은 Windows 커널에서 커널 객체 핸들을 동시에 조작하여 트리거할 수 있는 경쟁 조건race condition 취약점입니다. 특정 조건에서는 이중 해제double-free가 발생하며, 이를 악용하여 SYSTEM 으로 로컬 권한 상승 을 달성할 수 있습니다. 이 익스플로잇은 다음 방식으로 작동합니다: ...

CVE-2025-39866

CVE-2025-39866 - use-after-free Автор: Byte Reaper Описание Этот POC пытается эксплуатировать уязвимость CVE-2025-39866, которая является дефектом в Linux-системах iwb" и планирует критическое освобождение через "wbputmany". Шаг 3: - поток 2: освободить wbold - поток 1 - указатель - освобождённый...

bad-epoll

Bad Epoll: Mythos가 놓친 버그 권한이 없는 프로세스가 Google kernelCTF에서 root로 권한을 상승시키는 모습. Bad EpollCVE-2026-46242은 Linux 커널의 epoll 서브시스템에서 발생하는 레이스 컨디션 use-after-free 취약점입니다. 이 버그는 권한이 없는 프로세스가 Linux 데스크톱과 서버뿐만 아니라 Android 기기에서도 root가 될 수 있게 합니다. Bad Epoll은 Jaeyoung Chung이 Google kernelCTF에 0-day로 제보하고 익스플로잇한...

yamaha-smaf-player

Yamaha SMAF 플레이어 C++ by Akustikrausch Andreas Wendorf 작고 의존성이 없는 Yamaha SMAF 벨소리.mmf용 C++ 플레이어입니다. 2004년에 여러분의 삼성, 샤프, 파나소닉 폰에서 띵띠리링 소리를 냈던 그 파일을 넘기면, 깨끗한 스테레오 오디오를 반환합니다. 전화기도, 펌웨어도, 샘플 ROM도 필요 없습니다. 소프트웨어로 재구성된 FM 칩만 있으면 됩니다. 이것은 거의 아무도 오픈 코드로 보존하려고 애쓰지 않은 한 시대의 소리입니다. 이런 파일은 아직도 수백만 개가 떠돌아다니고...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

Firefox-CVE-2024-9680

Firefox CVE-2024-9680 CVE-2024-9680 Описание Злоумышленник смог добиться выполнения кода в контентном процессе, используя уязвимость use-after-free в временных шкалах анимации. У нас есть сообщения об эксплуатации этой уязвимости в реальных условиях. Эта уязвимость затрагивает Firefox 131.0.2,...

LuLu

LuLu 简体中文 | 正體中文 LuLu — это бесплатный межсетевой экран с открытым исходным кодом для macOS: Документация: Полные сведения и инструкции по использованию можно найти здесь. Поддержка: ❤ Нравится этот продукт и хотите поддержать его? Пожалуйста, посетите мою страницу на Patreon...

python: Use-after-free of a server-side SSLContext when sni_callback switches contexts

A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...

Important: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

frameless-bitb

Frameless BITB Новый подход к концепции Browser In The Browser BITB без использования iframe, позволяющий обходить традиционные framebusters, реализованные на страницах входа, таких как Microsoft. Этот POC-код создан для использования нового BITB с Evilginx и фишлетом Microsoft Enterprise. Прежде...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()

A flaw was found in the Linux kernel. A race condition exists in the xfrm policy handling, specifically within the xfrmpolicybyselctx function. This flaw allows for a use-after-free vulnerability, where memory is accessed after it has been released. This can lead to system instability or a denial...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability arises when asynchronous cryptographic operations incorrectly handle network packet segments, leaving a pointer to memory that has already been released. An attacker could potentially exploit this use-after-free condition t...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

kernel: netfilter: flowtable: publish GC-visible tuple last

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe component. A local, unprivileged user could exploit a race condition during a queue pair modification operation. This could lead to a use-after-free vulnerability, allowing the attacker ...

kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap

A flaw was found in the Linux kernel's RDMA/rxe component. A race condition in the rxemmap function, which manages memory for Remote Direct Memory Access RDMA operations, can lead to a use-after-free vulnerability. A local attacker could exploit this timing issue to cause a system crash, resultin...