cve-2016-0728-testbed

Banco de pruebas CVE-2016-0728 Este repositorio contiene un programa de prueba para CVE-2016-0728, un fallo de fuga de contador de referencias refcount leak y desbordamiento en Linux que conduce a un use-after-free. El fallo fue encontrado y explicado por Perception Point. No estoy afiliado a...

CVE-2019-2215

Bad-Binder CVE-2019-2215 A continuación se muestra el exploit para la vulnerabilidad bad binder CVE-2019-2215 probado en un emulador x86. El objetivo era abusar de la vulnerabilidad UAF para activar una primitiva AAR que filtrara direcciones del kernel y usar una primitiva AAW para sobrescribir...

Important: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration

A flaw was found in Apache HTTP Server when using the modldap module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service DoS due to improper memory handling. This could lead to system...

CVE-2021-0486

creationtimestamp| type| source ---|---|--- 2026-09-01 17:00:45+00:00| seen| https://t.me/cissp/3812 2026-09-02 01:04:33+00:00| seen| https://t.me/cissp/3812...

slides

diapositivas Una colección de diapositivas. 2025 Una historia sobre cómo desafiar a MTE: Rootear Google Pixel con el MTE del kernel habilitado en un solo intento Conferencia: POC 2025 2024 Un bug simple pero no fácil de explotar: Rootear dispositivos Android de una sola vez Conferencia: Cansecwes...

mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE

CVE-2025-47175 - Prueba de concepto PoC de ejecución remota de código por Use-After-Free UAF en Microsoft PowerPoint Resumen Este repositorio contiene un exploit de prueba de concepto PoC para la vulnerabilidad CVE-2025-47175 encontrada en Microsoft PowerPoint. La vulnerabilidad es un error de...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674 是旧版 jscript 引擎中的一个释放后使用漏洞。可在 Internet Explorer 中触发。此处的利用代码由 maxpl0it 编写，但漏洞本身由 Qihoo 360 在野发现。该利用代码仅弹出计算器。 漏洞利用分析文章可在此处找到。 漏洞概述 该漏洞存在于使用比较函数时的数组 sort 函数中。 提供给比较函数的两个参数未被垃圾回收器跟踪，因此在垃圾回收被调用后将指向已释放的内存。 利用说明 该利用代码专门为 Windows 7 编写，但移植起来可能不会太麻烦。 此利用代码适用于 IE 的 x64...

CVE-2018-17182

CVE-2018-17182 Linux 内核VMA-UAF 提权漏洞（CVE-2018-17182） About Google Project Zero的网络安全研究人员发布了详细信息，并针对自内核版本3.16到4.18.8以来Linux内核中存在的高严重性漏洞的概念验证（PoC）漏洞利用。 由白帽黑客Jann Horn发现，内核漏洞（CVE-2018-17182）是Linux内存管理子系统中的缓存失效错误，导致释放后使用漏洞， 如果被利用，可能允许攻击者获得root权限目标系统上的特权...

CVE-2026-81934

A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...

CVE-2026-68820-Mitigation-PoC-

CVE-2026-68820: Windows WinSock afd.sys UAF - Mitigation & Detection PoC 📌 Overview This repository contains an educational demonstration of the mitigation for CVE-2026-68820 , a critical Use-After-Free UAF vulnerability in the Windows afd.sys driver. Vulnerability context: The vulnerability allo...

huawei-p10-cve-2017-8890-unlock

Investigación sobre el desbloqueo del bootloader de Huawei P10 CVE-2017-8890 Este repositorio documenta un proyecto de investigación autorizado por el propietario que portó CVE-2017-8890 a un firmware de Huawei P10, convirtió el use-after-free del kernel en lectura/escritura arbitraria del kernel...

CVE-2026-84125

A flaw was found in Firefox. A use-after-free vulnerability in the DOM: Core & HTML component could allow a remote attacker to execute arbitrary code...

CVE-2026-84120

A flaw was found in the Audio/Video component of Firefox and Firefox ESR. This use-after-free vulnerability could allow a remote attacker to achieve arbitrary code execution. A use-after-free occurs when a program attempts to use memory that has been deallocated, which can lead to memory corrupti...

CVE-2026-84122

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84123

Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84125

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84124

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84120

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84121

Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...