3910 matches found
CVE-2018-1000030
CVE-2018-1000030 Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed ERRASANTHREADC18...
qemu-xhci-complete-uaf
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · qemu-xhci-complete-uaf qemu-xhci-complete-uaf QEMU v11.1.2 4fc49f46dc95d4a27de2509e7fceb2931e91faeb - qemu-xhci Class: UAF heap use-after-free. Reach: Local guest. xhcicomplete is the leftover of CVE-2026-17588. The...
CVE-2026-57187
The Asterisk telephony toolkit is vulnerable to a heap-use-after-free in PJSIP TCP/SDP handling. An authenticated attacker can trigger this by sending a SIP INVITE over a connection-oriented transport and disconnecting before the server responds with a 200 OK. While the crash has only been reprod...
List-CVE-2025-2026
CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...
sqlite-rtree-rowid0
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-rtree-rowid0 sqlite-rtree-rowid0 Class: UAF Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57 bf7c7f30031888f4e796e429ab3978879485813aaca6f641c7b33e4e09459bcc -...
CVE-2026-56848
CVE-2026-56848 NVD Description A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x. Note: versions mentioned in the descriptio...
teamspeak3-vulnerabilities
TeamSpeak 3 Server - Proof of Concept Exploits This repository contains proof of concept code for three vulnerabilities CVE-2026-4390, CVE-2026-4391 and CVE-2026-4392 discovered in the TeamSpeak 3 server 3.13.7. All findings were responsibly disclosed to TeamSpeak and published in our advisory. F...
CVE-2020-9273
CVE-2020-9273 These are the files I created during analysis and exploitaion of CVE-2020-9273 - a heap use-after-free in ProFTPd. Take a look at the exploit video here. Description about the files in this repo: poc-not-really-v4.c - an article and poc I wrote last year oct/2020, read to understand...
CVE-2026-45185
CVE-2026-45185 — Dead.Letter: Exim Heap UAF to Remote Root CVSS 9.8 Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS builds | Unauthenticated Full write-up with GDB trace, step-by-step analysis, and global exposure data: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html What is it...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP session.uploadprogress Heap Use-After-Free - Pre-Auth RCE v...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Peringatan...
CVE-2026-53918
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message first lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A DHCPv6 REQUEST from an adjacent-network...
CVE2026
php2shell — CVE-2026-109618 / CVE-2026-109619 Critical Ad...
Linux Distros Unpatched Vulnerability : CVE-2025-60476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap use-after-free in the gfodfac4cfgcleanlist function /odf/descriptors.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service Do...
php2shell-CVE-2026-109618-CVE-2026-109619-PoC
php2shell — CVE-2026-109618 / CVE-2026-109619 Critical Advisory CVSS v4.0: 9.2 - Critical: On October 20, details of two pre-auth Remote Code Execution RCE flaws in the PHP core leaked online ahead of coordinated disclosure. Exploitation allows arbitrary command execution straight from the web...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Research Indepe...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 — PHP Session Upload Progres...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Proof-of-concep...
Pillow: Heap Use-after-free When Encoding TIFF To An In-memory Buffer
Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When "TIFFWriteScanline" fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, "TIFFClose" flushe...