Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

CVE-2026-80661

A flaw was found in the Linux kernel's Universal Flash Storage UFS core tracing module. The system attempts to access a memory location that has already been freed when processing trace events, specifically within the TPprintk function. This use-after-free vulnerability can be triggered when...

Revenant

CVE-2026-74943 · Use-after-free in Firefox RasterImage surface discard This directory holds an honest reproduction scaffold for a cross-thread use-after-free in mozilla::image::RasterImage::OnSurfaceDiscarded. It is meant to be run against a locally downloaded vulnerable Firefox build using only...

CVE-2019-0211-exploit

CVE-2019-0211 — Apache HTTP Server 本地权限提升 CARPE DIEM 描述 CVE-2019-0211 是一个影响 Apache HTTP Server 2.4.17 至 2.4.38 版本（使用 modprefork 和 modphp 或 PHP-FPM）的本地权限提升 漏洞。 该漏洞允许拥有 www-data shell 的攻击者通过组合使用 PHP 中的 Use-After-Free UAF 和破坏 Apache 的 scoreboard 来提升至 root 权限。当 Apache 执行 正常重启 （例如，logrotate 在早上 6:25...

CVE-2026-82619

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

EUVD-2026-68367

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

CVE-2026-82623 open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

CVE-2026-82623 open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

CVE-2026-82623

CVE-2026-82623 affects open62541 versions up to 1.5.5 , specifically the function UA_DataValue_backend_copyRange in the file plugins/historydata/ua_history_data_backend_memory.c of the History Backend component. The root cause is a use-after-free that can be triggered remotely without privileges ...

redis-cve-2026-23479-check

redis-cve-2026-23479-check 一个安全、只读 的 CVE-2026-23479 版本检测器——该漏洞是 Redis 阻塞客户端代码中的释放后使用漏洞，允许已 认证 的用户在主机上实现远程代码执行。 它不会利用该漏洞。 它会连接，可选认证，执行一条只读的 INFO server 命令，解析版本号，并与已修复的版本列表进行比较。它从不发送阻塞命令，也从不触及漏洞代码路径。请仅对你拥有或明确授权测试的实例使用此工具。 为什么这很重要 “已认证”听起来很安全，但请记住 Redis 的实际部署方式：多年来默认无密码 ，即使现在它也是被内部无人防火墙隔离...

redis-cve-2026-23479-scanner

CVE-2026-23479 扫描器 Redis 释放后使用漏洞 CVE-2026-23479 检测工具。 自动检查 Redis 实例是否存在漏洞、配置错误和暴露风险。 受影响版本...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock X200 App A one-click root app for vivo X200 d...

CVE-2026-4253-Scanner

CVE-2026-42530 — 安全確認スキャナー NGINX HTTP/3 QUIC use-after-free に対する非破壊的マススキャナー バグを引き起こすことなく、どのホストが露出しているかを把握します。 ⚠️ 免責事項 このツールは許可されたセキュリティテスト専用 です。自身のインフラストラクチャ、または明示的な書面による許可を得たシステムにのみ使用してください。読み取り専用のフィンガープリント を実行し、脆弱性を悪用しません 。スコープ内にとどまり、適用される法律と責任ある開示の原則を遵守する責任はあなたにあります。著者は誤用に対する一切の責任を負いません。 🔍...

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — libvirt 脆弱性再現環境 このリポジトリは、CVE-2021-3975 （libvirt qemuProcessHandleMonitorEOF use-after-free、CWE-416）の 再現可能な脆弱性環境スナップショットであり、対応するコンテナイメージ yan5ui/cve-2021-3975:tier1（ubuntu:20.04 ベース）からエクスポートしたものです。 この環境では、脆弱性バージョンのソースコード に対して再現可能なビルドを完了し、ビルド成果物、ビルドスクリプト、完全なビルドログを保持しています。 脆弱性の再現と...

CVE-2026-23111

CVE-2026-23111 監査ツール Linux カーネル nftables UAF このリポジトリには、Linux 環境における CVE-2026-23111 脆弱性を詳細かつ正確に評価するために設計された自動監査スクリプト（Bash 製）が含まれています。 🔍 CVE-2026-23111 脆弱性とは？ CVE-2026-23111 は Linux カーネルの nftables サブシステムで発見された Use-After-Free UAF タイプの脆弱性です（開発版および安定版の 6.13 ブランチ以前のバージョンに広く影響します）。...

libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the xmlParseInternalSubset function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service DoS, making the affected system or application...

Moderate: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2026-82619 Systerel S2OPC subscription_mgr.c use after free

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

EUVD-2026-68359

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

CVE-2026-82619 Systerel S2OPC subscription_mgr.c use after free

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...