CVE-2026-2441

CVE-2026-2441 — Use-After-Free dans CSSFontFeatureValuesMap de Chrome CVSS 8.8 Élevé | Exploité activement dans la nature | RCE du rendu bac à sable Une vulnérabilité use-after-free dans le moteur CSS Blink de Google Chrome qui permet à un attaquant distant d'exécuter du code arbitraire à...

Exploit for Use After Free in Linux Linux_Kernel

Weaponisation research for CVE-2026-43499 ghostlock. the...

CVE-2026-42007

A flaw was found in Dovecot. An authenticated attacker can use a Sieve script with the editheader extension to trigger a use-after-free vulnerability in the mail editing code. This can lead to memory corruption, potentially crashing the mail delivery process and allowing for arbitrary code...

CVE-2026-80688

A flaw was found in the Linux kernel, specifically within the RISC-V architecture's veccheckunalignedaccessspeedallcpus function. This function, intended for initialization, could continue running as a kernel thread after its allocated memory is released. If this occurs, the system attempts to...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” تنفيذ تعليمات برمجية عن بُعد خطير في أسرع مخزن بيانات في الذاكرة أصبحت برمجة Lua في Redis الآن منصة انطلاق مثالية بعد المصادقة. مهاجم موثَّق ← سكربت Lua مصمَّم ← هروب من الصندوق الرملي ← تنفيذ أوامر كامل على المضيف ⚠️ نظرة عامة CVE-2025-49844 "RediShell " هي ثغرة...

CVE-2024-1086-Exploit

🔒 Projet d'exploit CVE-2024-1086 🛡️ Exploit Linux kernel pédagogique et abouti pour la recherche en sécurité Ce projet fournit un modèle robuste et non fonctionnel pour l'étude de la CVE-2024-1086, une vulnérabilité use-after-free dans le composant netfilter: nftables du noyau Linux, permettant un...

CVE-2023-1281

CVE-2023-1281 Vulnérabilité de type Use After Free dans le filtre d'index de contrôle de trafic tcindex du noyau Linux...

CVE-2018-4878

CVE-2018-4878 POC CVE-2018-4878 впервые была продемонстрирована как эксплуатируемая в дикой природе группой TEMP.Reaper. Этот репозиторий содержит POC, который мы создали на основе проанализированного вредоносного ПО; известно, что он работает против 32-битных версий Flash 27, эксплуатируя...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Использование-после-освобождения Удаленное выполнение кода через использование после освобождения в JScript.dll CVE-2025-30397 🧠 Описание Этот репозиторий содержит эксплойт доказательства концепции PoC для уязвимости типа использования после...

Linux Distros Unpatched Vulnerability : CVE-2026-84120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird...

PT-2026-84176

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird ESR versions prior to 153.2 Description A use-after-free issue exists in the Graphics: WebGPU component, which could lead to...

Stable Channel Update for Desktop

The Stable channel has been updated to 152.0.7977.75/.76 for Windows and Mac and 152.0.7977.75 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Mozilla Thunderbird < 140.15

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.15. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-87 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...

PT-2026-84171

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A use-after-free issue exists in the JavaScript: GC component. Use-after-free is a memory...

PT-2026-84173

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to...

Linux Distros Unpatched Vulnerability : CVE-2026-84125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

PT-2026-84177

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird ESR versions prior to 140.15 Thunderbird ESR versions prior to 153.2 Description A...

PT-2026-84174

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to...

AlmaLinux 10 : nodejs22 (ALSA-2026:61376)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61376 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

Mozilla Thunderbird < 153.2

The version of Thunderbird installed on the remote Windows host is prior to 153.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-88 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155...