CVE-2026-80650

A flaw was found in the Linux kernel's media: atomisp: gc2235 module. This vulnerability arises from incorrect error handling during the module's initialization process. Specifically, a use-after-free UAF condition can occur, where the system attempts to use memory that has already been released,...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

CVE-2019-8852

CVE-2019-8852 Un bug de tfp0 para macOS 10.15.1 y anteriores. Garantía Úsalo bajo tu propio riesgo. Esto hará que macOS entre en pánico. Lo construí solo para investigadores de seguridad. Estado actual Solo un PoC, convierte la vulnerabilidad en una UAF útil. Probado en macOS 10.14.6 18G103 ,...

Important: Red Hat Security Advisory: nodejs:24 security update

An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

CVE-2018-9539

CVE-2018-9539 CVE-2018-9539 的概念验证代码 如有任何问题，欢迎通过 Twitter 私信我（@tamirzb）。 构建 要构建此项目： 1. 下载 Android 源代码。 2. 将此仓库放入 AOSP/external。 3. 运行以下命令： root@kitploit: cd AOSP source build/envsetup.sh make casraceuaf 结果 在未修补的 Android 版本（2018 年 11 月之前的 8.1-9.0）上运行此 PoC 应会导致释放后使用（use-after-free）。请注意，此 PoC 并非真正打算在...

CVE-2026-80681

A flaw was found in the Linux kernel's vxlan component. A use-after-free vulnerability exists due to improper handling of the Ethernet header pointer after routeshortcircuit is called. When pskbmaypull reallocates the skb-head, the previously cached Ethernet header pointer becomes stale, leading ...

CVE-2026-80622

A flaw was found in the Linux kernel's tlclk driver. This vulnerability occurs due to improper module cleanup, where the driver can be unloaded while user-space processes are still active, and memory is freed prematurely. This can lead to a use-after-free condition and race conditions. A local...

CVE-2025-38001

CVE-2025-38001（RBTree家族闹剧） Linux HFSC Eltree 释放后使用 - Debian 12 PoC 此PoC利用基于RBTree变换的页级纯数据攻击来破坏系统。该漏洞利用代码具有可移植性，适用于所有kernelCTF实例（LTS 6.6.90、COS 109、COS 105）和Debian 12。在Ubuntu LTS上，由于Kmalloc随机缓存，只需进行少量修改。 漏洞分析与漏洞利用开发：https://syst3mfailure.io/rbtree-family-drama. 由提交...

io_uring-n-day

CVE-2024-0582 概念验证 此仓库包含CVE-2024-0582（iouring中的页面级释放后使用）的概念验证代码，用于学术研究。它包括内核配置、可复现QEMU环境的构建和运行脚本，以及我在分析中使用的PoC漏洞利用代码。 仅在受控的实验环境中使用此代码。请勿在您不拥有或未经明确许可的系统上部署。 要求 带有标准工具链（gcc、make等）的Linux主机 QEMU（已完成qemu-system-x8664测试） liburing开发头文件 不要在生产或第三方系统上运行此代码。 关于PoC的注意事项...

CVE-2019-0888

CVE-2019-0888 针对 CVE-2019-0888 的 PoC - Windows ActiveX 数据对象 ADO 中的释放后使用漏洞 详细分析：https://news.sophos.com/en-us/2019/07/09/cve-2019-0888-use-after-free-in-windows-activex-data-objects-ado/...

CVE-2026-15718-who-put-ptrs-in-my-wasm

CVE-2026-15718 — 谁把指针放进了我的 wasm 针对 CVE-2026-15718 的概念验证漏洞利用链，该漏洞是 Mozilla SpiderMonkey 的 WebAssembly baseline 编译器（"JavaScript: WebAssembly" 组件）中一处缺失 sync 的错误编译。单个零次循环的 array.fill 即可产生 fakeobj 原语；该利用链可升级为对宿主进程的任意读/写 以及任意本机代码执行 （posixspawnp"/bin/sh", ...）。 CVE： CVE-2026-15718（CWE-763，无效指针的释放） 受影响版本...

cve-2018-8611

CVE-2018-8611 KTM UAF 权限提升漏洞利用 这是我为 CVE-2018-8611 编写的 PoC 提权漏洞利用， 我在学习 ost2 windows 内核利用课程时写下了这个漏洞利用。 我非常喜欢这门课程，以及它循序渐进的教学方式和所提供的示例， 所以这是我自己的版本。我尽量不照搬课程提供的利用代码， 尽管不得不花几个小时调试各种奇怪的内核 bug， 但我确信自己无论如何都会完成它，所以我一直坚持了下来 :D 该漏洞利用实现了两种方式：较简单的方式是通过 write 0 原语覆盖 PreviousMode 字段， 以及递增原语技术。如果你使用 -w 参数运行该漏洞利用，...

kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect()

A flaw was found in the Linux kernel, specifically within its Bluetooth Synchronous Connection-Oriented SCO component. This vulnerability occurs due to race conditions when multiple connection attempts are made simultaneously on the same Bluetooth socket. This can lead to a use-after-free error,...

android-kernel-exploitation-lab

Android Kernel Exploitation Lab このラボでは、binderサブシステムにおける深刻なAndroidカーネル脆弱性であるCVE-2019-2215を調査するための環境構築をガイドします。 ドキュメント 環境セットアップ gdbスクリプトを使ったカーネル権限昇格 syzkallerによるファジング AFL++によるファジング 技術詳細: CVE-2019-2215 この脆弱性はAndroidのbinderドライバにおけるuse-after-freeで、以下の特徴があります。 1. 根本原因 : binder...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

Important: Red Hat Security Advisory: nodejs24 security, bug fix, and enhancement update

An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: nodejs22 security update

An update for nodejs22 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...