190526 matches found
Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958
Custom Exploit : Foxit Reader version 9.0.1.1049 Use After Free with ASLR and DEP bypass on heap My Custom Exploit : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Custom exploit for Win 7 Has space for shellcode My custom ROP chain makes space for shellcode i...
Linux Distros Unpatched Vulnerability : CVE-2026-98381
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: manage XDP program pointers during channel resize vethsetchannels tears down XDP resources for removed RX queues without clearing rq-xdpprog. If the progr...
Linux Distros Unpatched Vulnerability : CVE-2026-95702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to...
Linux Distros Unpatched Vulnerability : CVE-2026-98378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Skip unsettled links in link iterator bpflinkprime inserts a link into linkidr before anoninodegetfile succeeds and before bpflinksettle publishes the ID i...
CVE-2026-68138
CVE-2026-68138: Linux qdisc rate-table race to local root This repository contains a proof-of-concept local privilege-escalation exploit for CVE-2026-68138 , a race in the Linux traffic-control rate-table code. In the tested QEMU environment, the PoC escalates from an ordinary process with outer...
CVE-2026-23111-POC-noddlenpottato
CVE-2026-23111 — noddlenpottato nftables catchall UAF → unprivileged LPE. user to root on most 5.10—6.18 linux kernels. auto-adapts to the target kernel — detects struct offsets, resolves symbols, finds ROP gadgets, determines slab cache, generates tailored exploit, compiles and runs. nftables...
iOS26.6-CVE-2026-64788
CVE-2026-64788 — IOGPUFamily Use-After-Free Component: IOGPUFamily kernel extension com.apple.iokit.IOGPUFamily Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Use-After-Free in IOGPUDevice::createresourceiosurface Impact: Kernel memory corruption; UAF...
amazon-mustang-hack
AI-assisted project. This research, exploit development, and documentation were produced with AI assistance using the models GLM-5.3 and DeepSeek V4.1 Flash. amazon-mustang-hack Root exploit research for the Amazon Fire 7 9th gen mustang, MT8163, Mali-T720 on the final firmware — Fire OS 7.3.3.1,...
malware-samples
malware-samples A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net or https://twitter.com/inquest. Be sure to also check out the Deep File Inspection DFI portion of https://labs.inquest.net for an interactive searchable...
Ukraine-Cyber-Operations
Ukraine Cyber Operations Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine. Blog | Twitter | LinkedIn Resources Timeline of 2022 Threat...
awesome-cyber-skills
🛡️ awesome-cyber-skills A curated list of hacking environments where you can train your cyber skills free, legally and safely. 👋 Welcome Welcome to awesome-cyber-skills — your one-stop library for free, legal, and safe places to train your cybersecurity skills. 📑 Table of Contents 📖 About the List...
CVE-2026-107854
Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...
EUVD-2026-95983
Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...
CVE-2026-107854 Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)
Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...
CVE-2025-49844
🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...
Double Free
Overview Affected versions of this package are vulnerable to Double Free via SnappyFramedInputStream in src/main/java/org/xerial/snappy/SnappyFramedInputStream.java. An attacker can make two SnappyFramedInputStream instances share the same backing array by supplying framed data with a large...
CVE-2026-31787
XSA-487 / CVE-2026-31787 Linux kernel double free in Xen privcmd driver A double free of kernel memory in the Linux kernel's Xen privcmd driver allows circumvention of kernel lockdown secure boot. Exploitation requires root-level access, which limits the broader security implications. | ---|---...
bad_garbage
BADGARBAGE.c CVE-2026-53361 — an unprivileged, container-escapable use-after-free in the AFUNIX socket garbage collector. This is the single-vector MSGPEEK only version. The Bug The AFUNIX GC reclaims "in-flight" sockets that form unreachable reference cycles. A concurrent MSGPEEK on an in-flight...
CVE-2017-12561
CVE-2017-12561 - HPE iMC dbman Use-After-Free Technical analysis of CVE-2017-12561, a use-after-free vulnerability in the dbman service of Hewlett Packard Enterprise Intelligent Management Center iMC. Overview The vulnerability affects the service's handling of opcode 10012. Incorrect object...
