CVE-2015-0311

Reupload of an old Linux/Firefox port of an exploit for CVE-2015-0311 Use-after-free in Adobe Flash Player I created for educational purposes...

CVE-2026-98305

A flaw was found in the Linux kernel's MaxLinear MXL862xx Ethernet switch driver. Improper synchronization during device initialization failure, teardown, or shutdown allows background statistics polling to continue running after port resources have been released. This issue can allow a local use...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: AppleM2ScalerCSCDriver shared scheduler use-after-free Public technical disclosure for CVE-2026-43655 , an AppleM2ScalerCSCDriver / IOSurfaceAccelerator use-after-free reachable from the default iOS app sandbox with no special entitlements. Apple addressed this issue in iOS 26.5 /...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 – Linux Kernel rtmutex removewaiter proxy-lo...

cve-2016-0728-testbed

CVE-2016-0728 testbed This repository contains a test program for CVE-2016-0728, a refcount leak and overflow bug in Linux, that leads to a use-after-free. The bug was found and explained by Perception Point. I am not affiliated to them. Usage Welcome to the CVE-2016-0728 testbed sizeofstruct...

CVE-2026-98295

A flaw was found in the Linux kernel's Bluetooth subsystem. A local user can cause a Denial of Service DoS or memory corruption by disconnecting a Bluetooth device during an active diagnostic crash dump. Because the system fails to cancel pending dump tasks upon device unregistration, background...

Internet-Explorer-UAF

This repository does not have a README...

CVE-2024-52433

CVE-2024-52433 My Geo Posts Free = 1.2 - Unauthenticated PHP Object Injection Description The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated...

kernel security, bug fix, and enhancement update

5.14.0-687.56.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

CVE-2026-68121

⚡ CVE-2026-68121 - PPPoEject Linux Kernel PPPoE Use-After-Free → Local Privilege Escalation A Linux kernel memory-corruption vulnerability in the PPPoE transmit path , caused by a stale pointer to an skbuff header after a device header callback reallocates the skb head. ⚠️ Disclaimer This...

CVE-2026-98280

A flaw was found in the Linux kernel's Intel Xe graphics driver. During device unbinding, internal driver structures are freed before interrupt requests IRQs are disabled. If an interrupt occurs during this timing window, it can trigger a use-after-free condition where the system accesses already...

ida-pro-mcp

IDA Pro MCP !IMPORTANT Consiglio invece di usare l'Official Hex-Rays IDA MCP Server! Consulta il post di annuncio sul blog per maggiori informazioni. Semplice MCP Server per consentire il vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 I...

CVE-2026-98276

A flaw was found in the Linux kernel's networking subsystem. A local attacker can exploit a race condition during concurrent socket operations, such as retrieving timestamps while binding a network socket, because socket flags are modified without proper locking. This issue causes socket memory t...

huawei-p10-cve-2017-8890-unlock

Huawei P10 CVE-2017-8890 bootloader-unlock research This repository documents an owner-authorized research project that ported CVE-2017-8890 to one Huawei P10 firmware, converted the kernel use-after-free into arbitrary kernel read/write and temporary root, reconstructed Huawei's NVE journal,...

CVE-2026-43499-ZFOLD4

CVE-2026-43499-ZFOLD4 Device-specific research port of CVE-2026-43499 IonStack PI write-what-where for the Canadian Galaxy Z Fold4 SM-F936W on firmware F936WVLU1AVGA. This repository is the Fold4 counterpart of CVE-2026-43499-S24U and CVE-2026-43499-A36. It captures current incomplete progress:...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Use-after-free in Safari Infoleak Exploit - leak an address of a JSObject Tested on webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz Original PoC by Google Project Zero:...

CVE-2026-98266

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA subsystem. When an audio card is released asynchronously, such as during the disconnection of a USB sound device, active background tasks may continue accessing the device structure after it has been deallocated due to...

CVE-2026-98264

A flaw was found in the Advanced Linux Sound Architecture ALSA virtio sound driver in the Linux kernel. During device removal or system suspend operations, virtual queues are deleted before the virtual device is reset, allowing the device to access queue memory buffers after they have been freed...

CVE-2025-38352-PoC

CVE-2025-38352: Linux Kernel POSIX CPU Timer TOCTOU Race Condition & UAF A reproducible Proof-of-Concept PoC and automated GDB orchestration script for CVE-2025-38352 , a Time-of-Check to Time-of-Use TOCTOU race condition in the Linux kernel's POSIX CPU timer subsystem...