CURL-CVE-2026-18924 HTTP/2 server push UAF

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

CURL-CVE-2026-80229 OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

CVE-2025-49844-Vulnerability-Scanner

Escáner de Vulnerabilidad CVE-2025-49844 RediShell Un escáner de vulnerabilidades integral para probar instancias de Redis contra la vulnerabilidad crítica CVE-2025-49844 RediShell. Acerca de la Vulnerabilidad ID de CVE : CVE-2025-49844 Nombre : RediShell Puntuación CVSS : 10.0 Crítica Tipo :...

CVE-2026-71847

A flaw was found in Ruby JSON. A heap-use-after-free vulnerability exists in the JSON::ResumableParser component. A remote attacker, by supplying a specially crafted JSON stream with truncated duplicate keys, can cause the application to dereference freed memory. This can lead to process...

CVE-2026-23111-POC-noddlenpottato

CVE-2026-23111 — noddlenpottato nftables catchall UAF → unprivileged LPE. user to root on most 5.10—6.18 linux kernels. auto-adapts to the target kernel — detects struct offsets, resolves symbols, finds ROP gadgets, determines slab cache, generates tailored exploit, compiles and runs. nftables...

RLSA-2026:62219 Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...

nodejs:22 security update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

libssh security update

An update is available for libssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libssh is a library which implements the SSH protocol. It can be used to...

CVE-2026-43499

CVE-2026-43499 — Uso después de liberación en Futex PI del kernel Linux Bug removewaiter en kernel/locking/rtmutex.c es utilizado por las rutas de slowlock, pero también para la reversión de proxy-lock en rtmutexstartproxylock cuando se invoca desde futexrequeue. En el caso de proxy-lock,...

CVE-2024-36971

CVE-2024-36971 — 概念验证（仅限研究与分析） ⚠️ 免责声明 — 使用本仓库前请阅读 本仓库仅 用于防御性研究、分析和负责任的报告 。 它包含一个不可利用的概念验证文件，名为 CVE-2024-36971，以及一个公开可用的 Android 内核头文件片段（sock.h），用于说明受影响的区域。 不提供任何漏洞利用代码、复现命令或逐步操作说明。 请不要 在正式设备、第三方系统或非您控制的网络上运行本仓库中的任何文件。作者对误用不承担任何责任。 目录 1. 概述 2. 仓库内容 3. 高级技术摘要 4. 关于包含的 sock.h 片段 5. 研究环境（高级，不可操作） 6...

CVE-2020-28018

POC CVE-2020-28018 Introduction The Qualys team has discovered and published 21 critical vulnerabilities in the Exim4 mail server. https://blog.qualys.com/vulnerabilities-research/2021/05/04/21nails-multiple-vulnerabilities-in-exim-mail-server The following link provides detailed technical...

CVE-2023-20909

creationtimestamp| type| source ---|---|--- 2026-09-02 05:00:04+00:00| seen| Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0 2026-09-03 00:00:43+00:00| published-proof-of-concept| Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0...

CVE-2021-31166

CVE-2021-31166 0x00.Description これはCVE-2021-31166（「HTTP Protocol Stack Remote Code Execution Vulnerability」）の概念実証です。Microsoftが2021年5月にパッチを公開したhttp.sysにおけるuse-after-free解放後使用の逆参照です。 私の知る限り、これはプログラムのクラッシュを引き起こすことしかできません。使用には注意してください。 0x01.Impact Windows Server, version 20H2 Server Core Installation...

copy-fail-CVE-2026-31431-universal

CVE-2026-31431 - AFALG AEAD Splice UAF PoC 多语言实现，并兼容旧版 Python。 C（exploit.c） root@kitploit: gcc -o exploit exploit.c -O2 gcc -o exploit exploit.c -static -O2 ./exploit 已在 Ubuntu 20.04 上测试： Python（exploit-python3-8-10.py） 兼容 Python 3.8.10 及更早版本。兼容性说明： os.splice 需要 3.10+ —— 使用 ctypes 直接调用 libc 的 spl...

CVE-2026-51302-PoC

CVE-2026-51302: Technical Inconsistencies sorry for the clickbait repo name but this CVE is complete and utter LLM hallucinated slop, honestly sad to see a CNA accept this with how inconsistent the claims are 💔 Conclusion CVE-2026-51302 is not real 😱 The published SQL does not reproduce a...

CVE-2026-54107

当 ValidateHwnd 不再是一道门：深挖 CVE-2026-54107 的根因 一个发生在 win32kfull.sys 窗口生命周期管理中的释放后使用漏洞——我是如何发现它的，如何说服自己它是真实存在的，以及 MSRC 流程在研究者视角下到底是什么样子。 快到凌晨 2 点时，目标虚拟机不再响应调试器的心跳，并正好在我花了数周论证其可达的那条指令处停了下来。不是断言失败，也不是池损坏停机——而是一次发生在消息分发路径上的普通访问冲突，解引用了另一个线程已经拆除的对象。 那次断点最终成为 CVE-2026-54107 ，MSRC 案件编号 11xxxxx ，在 2026 年 7...

kernel: net: bridge: stop fast-leave after deleting a port group

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

CVE-2022-1011

CVE-2022-1011 Fix link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 This vulnerability is mainly due to the asynchronous nature of splice, which allows the user-mode filesystem process server side to retain a piece of memor...