bad_garbage

BADGARBAGE.c CVE-2026-53361 — un use-after-free sin privilegios y capaz de escapar del contenedor en el recolector de basura de sockets AFUNIX. Esta es la versión de vector único solo MSGPEEK. El fallo El GC de AFUNIX recupera los sockets «in-flight» que forman ciclos de referencia inalcanzables...

cve-2018-9951

Vulnerabilidad de ejecución remota de código por uso después de liberación Use-After-Free de CPDFObject en Foxit Reader Vulnerabilidad Hacer referencia a la memoria después de haber sido liberada puede provocar que un programa se bloquee, use valores inesperados o ejecute código Descripción de la...

cve-2018-8389

jscript.dll - ActiveXObject BSTR - Использование после освобождения Уязвимость Обращение к памяти после её освобождения может привести к сбою программы, использованию неожиданных значений или выполнению кода. Описание уязвимости Удалённое выполнение кода существует в способе обработки объектов в...

DEBIAN-CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2021-30573-PoC-Google-Chrome

CVE-2021-30573-PoC-Google-Chrome Vulnerabilidad Use After Free en Google Chrome reportada por el equipo S4E Recompensa total de Bug Bounty: $6.000 Esto es una Prueba de Concepto para: Gravedad de Seguridad de Google CVE ALTA CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Entrada del blog d...

CVE-2026-84641

A flaw was found in Thunderbird. A remote attacker, by operating a malicious Internet Message Access Protocol IMAP server, could send a specially crafted ID response. This could trigger a use-after-free vulnerability and lead to heap-memory disclosure, allowing sensitive heap contents to be...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — PoC de CVE-2026-43499 kernel 4.19 de Qualcomm Escalada de privilegios local que explota CVE-2026-43499 — un bug en removewaiter de rtmutex que deja un struct rtmutexwaiter colgando en la pila del kernel del waiter kernel/locking/rtmutex.c, use-after-free CWE-416. Adaptado de...

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84641

A use-after-free in Mozilla Thunderbird's IMAP ID response handling allows a malicious IMAP server to trigger heap-memory disclosure. The leaked heap contents can ultimately be persisted to prefs.js , enabling an attacker to recover sensitive data without user interaction. The vulnerability carri...

CVE-2026-84641 Information disclosure due to malicious IMAP server response

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

cve-2017-7117

cve-2017-7117 Acerca del error Una confusión de tipos y UAF encontrado en iOS 10.3.4 y anteriores, Safari anterior a 11.0. CVE-2017-7117: mitre.org Prueba de concepto original Descubierto por @lokihardt, fuente: Google Project Zero root@kitploit: function f let o = ; for let i in xx: 0 // i is a...

optee-qemu

CVE-2021-44733: Fuzzing y explotación de un use-after-free en el subsistema TEE del kernel de Linux Recientemente se descubrió una vulnerabilidad de use-after-free en el subsistema TEE del kernel de Linux, hasta la versión 5.15.11 inclusive, y se le asignó CVE-2021-44733 1. A primera vista no...

2022-LPE-UAF

2022-LPE-UAF Непроверенный POC-код Исследователи безопасности обнаружили 3 уязвимости в ядре Linux, которые могут позволить локальному злоумышленнику повысить привилегии и потенциально выполнить вредоносный код. Эксплойт-код находится в открытом доступе, что повышает вероятность эксплуатации в...

full-poc-CVE-2025_21298

Review of the CVE-2025-21298 vulnerability CVE-2025-21298 is a critical vulnerability in the OLE Object Linking and Embedding technology used in Microsoft Windows. It specifically affects the UtOlePresStmToContentsStm function in the ole32.dll library. This function is responsible for converting ...

CVE-2017-7520

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:52+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw 2026-09-02 01:03:29+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw...

CVE-2021-34530

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:29+00:00| seen| https://t.me/hackingAttack/19794 2026-09-01 20:02:29+00:00| seen| https://t.me/hackingAttack/19795 2026-09-02 01:03:02+00:00| seen| https://t.me/hackingAttack/19795 2026-09-02 01:03:03+00:00| seen|...

CVE-2016-9682

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:54+00:00| seen| https://t.me/hackingAttack/43422 2026-09-02 01:02:14+00:00| seen| https://t.me/hackingAttack/43422...

CVE-2021-24966

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:54+00:00| seen| https://t.me/hackingAttack/43095 2026-09-02 01:02:14+00:00| seen| https://t.me/hackingAttack/43095...

CVE-2020-15801

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:46+00:00| seen| https://t.me/hackingAttack/49651 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45703 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49651 2026-09-02 01:02:04+00:00| seen|...