iOS26.6-CVE-2026-64788

CVE-2026-64788 — IOGPUFamily Use-After-Free Component: IOGPUFamily kernel extension com.apple.iokit.IOGPUFamily Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Use-After-Free in IOGPUDevice::createresourceiosurface Impact: Kernel memory corruption; UAF...

amazon-mustang-hack

AI-assisted project. This research, exploit development, and documentation were produced with AI assistance using the models GLM-5.3 and DeepSeek V4.1 Flash. amazon-mustang-hack Root exploit research for the Amazon Fire 7 9th gen mustang, MT8163, Mali-T720 on the final firmware — Fire OS 7.3.3.1,...

malware-samples

malware-samples A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net or https://twitter.com/inquest. Be sure to also check out the Deep File Inspection DFI portion of https://labs.inquest.net for an interactive searchable...

Ukraine-Cyber-Operations

Ukraine Cyber Operations Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine. Blog | Twitter | LinkedIn Resources Timeline of 2022 Threat...

awesome-cyber-skills

🛡️ awesome-cyber-skills A curated list of hacking environments where you can train your cyber skills free, legally and safely. 👋 Welcome Welcome to awesome-cyber-skills — your one-stop library for free, legal, and safe places to train your cybersecurity skills. 📑 Table of Contents 📖 About the List...

CVE-2026-107854

Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...

EUVD-2026-95983

Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...

CVE-2026-107854 Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)

Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via SnappyFramedInputStream in src/main/java/org/xerial/snappy/SnappyFramedInputStream.java. An attacker can make two SnappyFramedInputStream instances share the same backing array by supplying framed data with a large...

CVE-2026-31787

XSA-487 / CVE-2026-31787 Linux kernel double free in Xen privcmd driver A double free of kernel memory in the Linux kernel's Xen privcmd driver allows circumvention of kernel lockdown secure boot. Exploitation requires root-level access, which limits the broader security implications. | ---|---...

bad_garbage

BADGARBAGE.c CVE-2026-53361 — an unprivileged, container-escapable use-after-free in the AFUNIX socket garbage collector. This is the single-vector MSGPEEK only version. The Bug The AFUNIX GC reclaims "in-flight" sockets that form unreachable reference cycles. A concurrent MSGPEEK on an in-flight...

CVE-2017-12561

CVE-2017-12561 - HPE iMC dbman Use-After-Free Technical analysis of CVE-2017-12561, a use-after-free vulnerability in the dbman service of Hewlett Packard Enterprise Intelligent Management Center iMC. Overview The vulnerability affects the service's handling of opcode 10012. Incorrect object...

CVE-2026-106373

An use after free flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523699645...

CVE-2026-106335

An use after free flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502105238...

CVE-2026-106291

An use after free flaw was found in the GarbageCollection component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/499571442...

CVE-2026-106283

An use after free flaw was found in the Streaming component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/499468981...

Exploit for Use After Free in Linux Linux_Kernel

English | 中文 Honor 80 GT Privilege Escalat...

CVE-2026-106315

An use after free flaw was found in the Modularization component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/497652727...

CVE-2026-2766-but-with-wasm

CVE-2026-2766, but with wasm Status: validated crash PoC with demonstrated control-flow hijack crashpc = freed-cell poison 0xcdcdcdcdcdcdcdcd under the debug shell — the engine jumps to a pointer read out of the freed ICScript. Remaining work: control the reclaimed bytes. See research/README.md. ...