CVE-2026-42530

CVE-2026-42530 CVE-2026-42530 스캐너, nginx HTTP/3 모듈의 use-after-free 취약점. 영향을 받는 버전: nginx 1.31.0, 1.31.1 수정된 버전: nginx 1.31.2 사용법 root@kitploit: pip install aioquic python3 scannerCVE-2026-42530.py port python3 scannerCVE-2026-42530.py --file hosts.txt 작동 방식 동일한 연결에서 두 개의 QPACK 인코더 스트림을 엽니다. 패치된 버...

CVE-2025-48593

CVE-2025-48593 "단일 악성 패킷으로 기기를 장악할 수 있습니다." — Android 보안팀, 2025년 11월 Android 시스템블루투스 하위 시스템의 제로 클릭 원격 코드 실행 ⚠️ 중요 범위 설명 2026년 4월 업데이트 일반 휴대폰과 태블릿은 취약하지 않습니다. CVE-2025-48593은 스마트워치, 스마트 안경, 자동차 와 같이 블루투스 헤드폰/스피커 역할을 지원하는 Android 기기에만 영향을 미칩니다. 또한 공격자는 취약점을 악용하기 전에 피해자가 블루투스 페어링 요청을 수락 하도록 해야 합니다...

chronomaly-webos

Chronomaly — CVE-2025-38352 on LG webOS CVE-2025-38352 POSIX CPU 타이머 경쟁 조건 / use-after-free에 대한 커널 익스플로잇으로, ARM64에서 커널 5.4.268을 실행하는 LG webOS 스마트 TV에서 지속적인 루트 권한을 얻습니다. 여러 펌웨어 버전의 4개 TV 모델에서 확인되었습니다. LG 보안 연구자 프로그램에 책임 있는 공개를 완료했습니다2026년 2월. farazsth98의 Chronomaly를 기반으로 구축되었습니다. 1단계 UAF 경쟁 로직과 크로...

badepoll-selinux-disabler

badepoll-selinux-disabler CVE-2026-43074 eventpoll UAF エクスプロイトから、SELinux 無効化ステージを単体抽出したものです。eventpoll のループ深度チェック（epgetupwardsdepthproc）を競合させ、selinuxstate.enforcing にゼロを書き込むことで、シングルバイトのカーネル書き込みによりデバイスを Permissive に切り替えます。これは MAC 無効化プリミティブのみであり、権限昇格は含みません。 !WARNING...

CVE-2026-23111

CVE-2026-23111 PoC Linuxカーネル nftablesのUse-After-Free（ローカル権限昇格） poc by baba01hacker 脆弱性の概要 CVE : CVE-2026-23111 タイプ : Use-After-Free CWE-416 CVSS : 7.8 HIGH コンポーネント : net/netfilter/nftablesapi.c — nftmapcatchallactivate 根本原因 : 反転したgenmaskチェックにより、トランザクションアボート中にチェーン参照カウンタがリークする 影響を受けるカーネルバージョン...

CVE-2026-52943

이 저장소 사용 방법 이것은 skbuff.c의 use-after-free 취약점에 대한 Linux 커널 로컬 권한 상승 PoC 코드입니다: https://github.com/torvalds/linux/commit/98d0912e9f841e5529a5b89a972805f34cb1c69d vidieo1.webm 여기에 설명writeup 링크가 있습니다: https://hackmd.io/@mlc0cVjxSwqv0OoxsUYccw/Bk99YYTyzx writeup을 보려면 cloudfare warp 또는 VPN을 켜야 합니다 큰...

ghostlock-selinux-disabler

GhostLock SELinux Disabler Write-1-only 抽出版 JoinChang/ghostlock-oneplus （CVE-2026-43499 対象）。 ロックされたブートローダーを持つ、対応済み脆弱性のある OnePlus カーネル上で SELinux の enforcing を無効にし、それ以外は何もしません。cred の上書き、root シェル、KernelSU、bootstrap、KASLR リークは行いません。 脆弱性 CVE-2026-43499 は、futex PI requeue パスにおける Linux カーネルの rtmutex...

Android-CVE-2026-43499

CVE-2026-43499 탐지기 커널 취약점 CVE-2026-43499futexrequeue를 통해 트리거되는 rtmutex의 use-after-free를 탐지하는 Android 앱입니다. 취약점 | ---|--- CVE| CVE-2026-43499 유형| Use-after-free 구성 요소| kernel/locking/rtmutex.c 트리거| futexrequeue → removewaiter의 프록시 잠금 롤백이 waiter-task 대신 current를 사용 CVSS| 7.8 HIGH 영향 범위| Linux 2.6.3...

PT-2026-83717

Name of the Vulnerable Software and Affected Versions valkey-io valkey version 9.1.0 Description A use after free flaw exists in the Blocked-on-keys Subsystem within the handleClientsBlockedOnKey function located in the src/blocked.c file. This issue can be triggered remotely, although the attack...

Linux Distros Unpatched Vulnerability : CVE-2026-80619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing udata-size after calling aaputloaddataudata, causing a potential...

Linux Distros Unpatched Vulnerability : CVE-2026-80600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which...

Linux Distros Unpatched Vulnerability : CVE-2026-80661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ufs: core: tracing: Do not dereference pointers in TPprintk The trace events in drivers/ufs/core/ufstrace.h were converted to take a pointer to the hba structur...

Linux Distros Unpatched Vulnerability : CVE-2026-26447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then...

Linux Distros Unpatched Vulnerability : CVE-2026-18706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause ...

Linux Distros Unpatched Vulnerability : CVE-2026-80613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes...

SUSE SLES12 Security Update : curl (SUSE-SU-2026:3814-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3814-1 advisory. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. -...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-130 (ALASKERNEL-5.10-2026-130)

The version of kernel installed on the remote host is prior to 5.10.265-265.1078. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-130 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption...

ALSA-2026:61386 Important: nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...

RHEL 10 : nodejs24 (RHSA-2026:61377)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61377 advisory. Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an...

RockyLinux 9 : nodejs:22 (RLSA-2026:61383)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61383 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...