util-linux security update

An update is available for util-linux. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The util-linux packages contain a large variety of low-level system...

RLSA-2026:93461 Important: util-linux security update

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fixes: util-linux: TOCTOU in the mount program when setting up loop devices...

util-linux: util-linux: heap use-after-free in libblkid nested partition probing

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be...

Important: Red Hat Security Advisory: util-linux security update

An update for util-linux is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

RHEL 10 : util-linux (RHSA-2026:93461)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93461 advisory. The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among...

ALSA-2026:93461 Important: util-linux security update

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fixes: util-linux: TOCTOU in the mount program when setting up loop devices...

CVE-2020-9273

CVE-2020-9273 These are the files I created during analysis and exploitaion of CVE-2020-9273 - a heap use-after-free in ProFTPd. Take a look at the exploit video here. Description about the files in this repo: poc-not-really-v4.c - an article and poc I wrote last year oct/2020, read to understand...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim Heap UAF to Remote Root CVSS 9.8 Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS builds | Unauthenticated Full write-up with GDB trace, step-by-step analysis, and global exposure data: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html What is it...

qemu-colo-l4-oob

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · qemu-colo-l4-oob qemu-colo-l4-oob QEMU v11.1.2 4fc49f46dc95d4a27de2509e7fceb2931e91faeb - COLO filter-rewriter Class: OOB heap buffer overflow READ/WRITE. Reach: Local guest / Remote COLO peer. parsepacketearly accept...

php2shell-CVE-2026-109618-CVE-2026-109619-PoC

php2shell — CVE-2026-109618 / CVE-2026-109619 Critical Advisory CVSS v4.0: 9.2 - Critical: On October 20, details of two pre-auth Remote Code Execution RCE flaws in the PHP core leaked online ahead of coordinated disclosure. Exploitation allows arbitrary command execution straight from the web...

CLEANSTART-2024-RV57339 heap-use-after-free in GitHub repository radareorg/radare2 prior to 5

Security vulnerability affects the radare2 package. heap-use-after-free in GitHub repository radareorg/radare2 prior to 5...

CLEANSTART-2025-YD61761 heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm

Security vulnerability affects the imagemagick package. A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo function of dcm...

CLEANSTART-2025-MS24832 heap use-after-free flaw was found in coders/bmp

Security vulnerability affects the imagemagick package. A heap use-after-free flaw was found in coders/bmp...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed ERRASANTHREADC18...

sqlite-rtree-rowid0

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-rtree-rowid0 Write-up: https://abraxaslabs.tech/research/sqlite-rtree-rowid0 sqlite-rtree-rowid0 Class: UAF Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57...

CVE-2026-56848

CVE-2026-56848 NVD Description A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x. Note: versions mentioned in the descriptio...

teamspeak3-vulnerabilities

TeamSpeak 3 Server - Proof of Concept Exploits This repository contains proof of concept code for three vulnerabilities CVE-2026-4390, CVE-2026-4391 and CVE-2026-4392 discovered in the TeamSpeak 3 server 3.13.7. All findings were responsibly disclosed to TeamSpeak and published in our advisory. F...

CVE-2026-119332

The Ladybird web browser is vulnerable to a use-after-free vulnerability in Libraries/LibJS/Runtime/FinalizationRegistry.cpp within the FinalizationRegistry::cleanup() function. The issue occurs when the function removes a dead record, retains an iterator to the next record, and executes an attac...

CVE-2026-119332 Ladybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()

Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup in Libraries/LibJS/Runtime/FinalizationRegistry.cpp removed a dead record from mrecords, retained an iterator to the next FinalizationRecord, and then invoked...