CVE-2026-68138

CVE-2026-68138 — موقع تتبّع ثغرة UAF في جدول معدّلات qdisc داخل net/sched بنواة لينكس مصدر متتبّع حالة التصحيح CVE-2026-68138 : موقع من صفحة واحدة يسجّل التوزيعات التي أصدرت إصلاحًا لثغرة الاستخدام بعد التحرير use-after-free / التحرير المزدوج double-free في جدول معدّلات qdisc داخل net/sched بنواة...

honda

RoguePlanet بواسطة Nightmare-Eclipse HONDA بواسطة nu11secur1ty ثغرة RoguePlanet في Windows Defender المؤلفون: مطور الاستغلال الأصلي Nightmare-Eclipse التطوير والاختبار والتسليح nu11secur1ty مهندس اختبار الاختراق 🧠 التحليل الفني بواسطة nu11secur1ty يستغل هذا الاستغلال حالة سباق race condition بين...

CVE-2026-2764-but-with-wasm

CVE-2026-2764, 하지만 wasm 사용 상태: 분석 + 검증된 PoC. 프리미티브 무기화 진행 중. 이번에는 2026년 버그를 기반으로 한 WasmBlazeFox 스타일 체인: CVE-2026-2764, JavaScript Engine: JIT 구성 요소의 IonMonkey/baseline "JIT 오류 컴파일 + use-after-free", Firefox 148에서 수정됨MFSA 2026-13, CVSS 미정. CVE-2024-29943-but-with-wasm과 동일한 종착점: 프리미티브를 셸코드 상수로 가득 찬...

CVE-2026-82623

A flaw was found in open62541. A remote attacker could exploit a use-after-free vulnerability in the UADataValuebackendcopyRange function within the History Backend component. This flaw could lead to a denial of service, making the affected system unavailable. Mitigation Update open62541 to versi...

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – الاستخدام بعد التحرير Use‑After‑Free في Rust داخل خادم ويب غير آمن الكود البرمجي Rust root@kitploit: // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct...

nodejs:22 security update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

nodejs:24 security update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RLSA-2026:61386 Important: nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...

RLSA-2026:61383 Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...

CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" هذا المستودع هو مُدقِّق لثغرة Bad Epoll لأنوية aarch64، استنادًا إلى استغلال موجود مسبقًا لمعمارية x86. تصعيد محلي للامتيازات في نواة لينكس عبر حالة سباق استعمال-بعد-التحرير فيepoll الحقل| التفاصيل ---|--- CVE| CVE-2026-46242 الاسم المستعار| Bad Epoll النوع| استعمال ب...

CVE-2022-32250-LPE

CVE-2022-32250-LPE LPE exploit for CVE-2022-32250 - a Use-After-Free vulnerability in netfilter. My write-up of the vulnerability: Conquering a Use-After-Free in nftables: Detailed Analysis and Exploitation of CVE-2022-32250 Building Building requires libmnl and libnftnl. root@kitploit: gcc -lmnl...

CVE-2026-14366

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

CVE-2026-14366 SiWx91x WiFi driver double-unref / use-after-free of caller-owned TX net_pkt

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

CVE-2026-14366

CVE-2026-14366 affects the Silicon Labs SiWx917 WiFi driver in the Zephyr RTOS. The transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c calls net_pkt_unref() on a packet owned by the caller (ethernet_send() in subsys/net/l2/ethernet/ethernet.c), causing a use-after-free and do...

CVE-2026-14366 SiWx91x WiFi driver double-unref / use-after-free of caller-owned TX net_pkt

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

CVE-2026-80692

A flaw was found in the Bluetooth hcisync component of the Linux kernel. This vulnerability, a Use-After-Free UAF, could allow a local attacker to potentially cause a system crash or execute unauthorized code. This occurs if a connection object is released from memory while the hcisync task is...

CVE-2026-64560-Analysis

CVE-2026-64560 — Linux Kernel posix-cpu-timers: UAF بسبب سباق exec من خيط غير قائد مُعيد الإنتاج / PoC للتحقق من حدوث الثغرة : Linux وAndroid NDK يُستخدم هذا المستودع فقط للتحقق من حالة التصحيح ولأغراض البحث والتعلّم على أجهزة الاختبار الخاصة بك ، ولا يحتوي على أي بدائيات تصعيد صلاحيات أو استغلال...

Updated c-ares packages fix security vulnerabilities

Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via aresgetaddrinfo over TCP. CVE-2026-33630 CPU-exhaustion denial of service via unbounded DNS name compression pointer chains. CVE-2026-69184 Memory-amplification denial of service via unvalidated DNS header...

MGASA-2026-0343 Updated c-ares packages fix security vulnerabilities

Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via aresgetaddrinfo over TCP. CVE-2026-33630 CPU-exhaustion denial of service via unbounded DNS name compression pointer chains. CVE-2026-69184 Memory-amplification denial of service via unvalidated DNS header...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...