CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy

CVE-2026-1111 – إعادة الدخول عبر الدوال في العقد الذكي كود البرنامج Solidity + Python root@kitploit: // VulnerableBank.sol - Simplified reentrancy example with cross-function bypass pragma solidity ^0.8.0; contract VulnerableBank mappingaddress = uint256 public balances; function deposit public...

CVE-2025-4126

POC-CVE-2025-4126 التحقق من ثغرة هجوم إعادة الدخول في العقود الذكية إثبات مفهوم هجوم إعادة الدخول في العقود الذكية يحتوي هذا المستودع على إثبات مفهوم PoC يوضح ثغرة هجوم إعادة الدخول في العقود الذكية على إيثيريوم. يتضمن إثبات المفهوم عقدًا ذكيًا قابلًا للاختراق، وعقد المهاجم، وتعليمات لإعادة إنتاج...

evm-audit-helpers

evm-audit-helpers Vue d'ensemble evm-audit-helpers est une collection organisée d'extraits Solidity, de scripts Foundry et de modèles de tests conçus pour accélérer les audits de sécurité des smart‑contracts EVM. Le dépôt regroupe des blocs réutilisables pour les préoccupations d'audit courantes...

smart-contract-vulnerabilities

ثغرات العقود الذكية مجموعة من ثغرات العقود الذكية مع طرق الوقاية منها. انظر /references للحصول على مراجع محسّنة للنماذج اللغوية الكبيرة LLM. التحكم في الوصول الترخيص عبر tx.origin عدم كفاية التحكم في الوصول Delegatecall إلى جهة غير موثوقة قابلية التلاعب بالتوقيع عدم وجود حماية ضد هجمات إعادة...

Exploit for CVE-2026-56848

CVE-2026-56848 NVD Description A flaw in Node.js HTTP/2...

ANT-2026-Z3GGGKM5 · ava-labs/libevm · Denial of Service / Nil Pointer Dereference

denial-of-service high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-Z3GGGKM5: Reentrancy guard dereferences nil StateDB...

PT-2026-73406

A flaw in Node.js HTTP/2 handling allows nghttp2 session mem send to be called re-entrantly while nghttp2 session mem recv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

PT-2026-73396

A flaw in Node.js HTTP/2 handling allows nghttp2 session mem send to be called re-entrantly while nghttp2 session mem recv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

CVE-2026-56848

A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

CVE-2026-56848

A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

CVE-2026-57243

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash...

EUVD-2026-42208

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash...

CVE-2026-57243

CVE-2026-57243 affects Foxit PDF Editor/Reader. A JavaScript reentrancy during page opening and form formatting leads to an inconsistent document status and, with outdated page information, the application accesses invalid addresses, causing a crash. Current details describe the vulnerable operat...

CVE-2026-57243 Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash...

CVE-2026-57243

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash...

PT-2026-56342

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description During page opening and form formatting, a JavaScript reentrancy—a situation where a function is interrupted and called again before its first execution completes—leads to an...

curl: Use-after-free in `mev_forget_socket` when `curl_easy_pause()` is called from a `CURL_POLL_REMOVE` socket callback (incomplete fix of CVE-2026-9080)

Summary libcurl's event interface lets the application's socket callback CURLMOPTSOCKETFUNCTION call curleasypause. CVE-2026-9080 was issued for a use-after-free that this triggers, and the fix added a post-callback re-fetch of the socket-hash entry in the UPDATE leg mevshentryupdate,...

Smart_Contract_Researcher_POC

Smart Contract Security Research Portfolio hailthelord...

CVE-2026-48066

pamusb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/log.c contains a process-wide static pointer that is written on every PAM invocation with the address of a stack-local variable. This violates the PAM re-entrancy requirement and creates a data...

CVE-2026-46029

In the Linux kernel, CVE-2026-46029 describes a race within the slab allocator where kmalloc_nolock() called from NMI on uniprocessor (UP) configurations can re-enter the allocator and acquire n->list_lock that the interrupted context already holds, corrupting slab state and potentially causin...