ghostlock-cve-2026-43499-4.19-k40

GhostLock — PoC de CVE-2026-43499 kernel 4.19 de Qualcomm Escalada de privilegios local que explota CVE-2026-43499 — un bug en removewaiter de rtmutex que deja un struct rtmutexwaiter colgando en la pila del kernel del waiter kernel/locking/rtmutex.c, use-after-free CWE-416. Adaptado de...

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84641

A use-after-free in Mozilla Thunderbird's IMAP ID response handling allows a malicious IMAP server to trigger heap-memory disclosure. The leaked heap contents can ultimately be persisted to prefs.js , enabling an attacker to recover sensitive data without user interaction. The vulnerability carri...

CVE-2026-84641 Information disclosure due to malicious IMAP server response

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

cve-2017-7117

cve-2017-7117 关于漏洞 一个类型混淆和 UAF（释放后使用）漏洞，存在于 iOS 10.3.4 及更早版本，以及 Safari 11.0 之前。 CVE-2017-7117：mitre.org 原始概念验证 由 @lokihardt 发现，来源：Google Project Zero root@kitploit: function f let o = ; for let i in xx: 0 // i is a String for i of 0 // i is now a number, but JIT treats as String printoi; // whoop...

optee-qemu

CVE-2021-44733: Fuzzing y explotación de un use-after-free en el subsistema TEE del kernel de Linux Recientemente se descubrió una vulnerabilidad de use-after-free en el subsistema TEE del kernel de Linux, hasta la versión 5.15.11 inclusive, y se le asignó CVE-2021-44733 1. A primera vista no...

2022-LPE-UAF

2022-LPE-UAF Непроверенный POC-код Исследователи безопасности обнаружили 3 уязвимости в ядре Linux, которые могут позволить локальному злоумышленнику повысить привилегии и потенциально выполнить вредоносный код. Эксплойт-код находится в открытом доступе, что повышает вероятность эксплуатации в...

full-poc-CVE-2025_21298

CVE-2025-21298 漏洞回顾 CVE-2025-21298 是一个严重影响 Microsoft Windows 中 OLE（对象链接与嵌入）技术的漏洞。 它专门影响 ole32.dll 库中的 UtOlePresStmToContentsStm 函数。该函数负责将 OLE 存储中的"表示流"转换为"内容流"。 当用户在 Microsoft 产品中打开恶意 RTF 文件时，可能触发该漏洞。由于内存管理不当，攻击者可以利用此缺陷在系统上运行自己的代码。 这是一个"释放后使用"漏洞，被归类为...

CVE-2017-7520

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:52+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw 2026-09-02 01:03:29+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw...

CVE-2021-34530

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:29+00:00| seen| https://t.me/hackingAttack/19794 2026-09-01 20:02:29+00:00| seen| https://t.me/hackingAttack/19795 2026-09-02 01:03:02+00:00| seen| https://t.me/hackingAttack/19795 2026-09-02 01:03:03+00:00| seen|...

CVE-2016-9682

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:54+00:00| seen| https://t.me/hackingAttack/43422 2026-09-02 01:02:14+00:00| seen| https://t.me/hackingAttack/43422...

CVE-2021-24966

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:54+00:00| seen| https://t.me/hackingAttack/43095 2026-09-02 01:02:14+00:00| seen| https://t.me/hackingAttack/43095...

CVE-2020-15801

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:46+00:00| seen| https://t.me/hackingAttack/49651 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45703 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49651 2026-09-02 01:02:04+00:00| seen|...

CVE-2022-24630

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:04+00:00| seen| https://t.me/hackingAttack/91679 2026-09-02 01:01:24+00:00| seen| https://t.me/hackingAttack/91679...

CVE-2025-39913

CVE-2025-39913 - Linux Kernel eBPF SOCKMAP UAF Autor: Byte Reaper Mi plataforma :https://www.bytrep.com/ Descripción Este repositorio contiene una prueba de concepto técnica para CVE-2025-39913, una vulnerabilidad en la función tcpbpfsendverdict del kernel de Linux. Cuando bpfmsgcorkbytes no pued...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

PoC-CVE-2020-9715

CVE-2020-9715 EDR 验证 PoC Adobe Acrobat Reader DC 的 EScript.api ESObject 缓存中存在释放后使用漏洞。仅限授权红队进行EDR测试。 漏洞 Adobe Acrobat Reader DC = 2020.009.20063。EScript 引擎缓存数据 ESObject 时，使用的键保留了原始编码（ANSI 或 Unicode）。删除操作始终构造 Unicode 键，因此 ANSI 命名的条目永远不会从缓存中清除。在 GC 释放底层对象后，过期的缓存条目变成悬空指针。 PoC 的功能 1. 在 PDF 中嵌入一个具有 ANS...

Detection-and-Mitigation-for-CVE-2022-1679

针对 CVE-2022-1679 的检测与缓解 ath9k 是一个支持 Atheros 芯片的 Linux 内核驱动程序。在 Linux 内核的 Atheros 无线适配器驱动中发现了一个释放后使用漏洞，其利用方式为用户通过某些输入消息强制 ath9khtcwaitfortarget 函数失败。此漏洞允许本地用户使系统崩溃或可能提升其权限。建议在未使用受影响版本的 CVE-2022-1679 漏洞模块时将其加入黑名单。 安装 wget...

CVE-2021-30573

CVE-2021-30573-PoC-Google-Chrome Vulnerabilidad Use After Free de Google Chrome reportada Recompensa total de Bug Bounty: $6.000 Esta es la prueba de concepto para: Google SecuritySeverity CVE. ALTA CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Entrada del blog de Google:...