CVE-2026-53359-Kernel-Fix

Chino | Inglés Chino Tutorial para actualizar el kernel de Linux a 7.1.3 y corregir CVE-2026-53359 Declaración: Este artículo solo documenta el proceso de corrección en mi propio entorno de servidor. No es un análisis de seguridad profesional. Si hay errores, agradezco las correcciones. Nota de...

android-badbinder-demo

CVE-2019-2215 Bad Binder — エクスプロイト解析 このリポジトリは、脆弱性 CVE-2019-2215 Bad Binder を調査し、Kotlin/Jetpack Compose によるシンプルな GUI を備えた Android 向けの動作するエクスプロイトプロトタイプを作成するための小さなテストプロジェクトです。 README では以下の内容を扱います。 1. 環境準備とエクスプロイトプロトタイプの実行方法の説明。 2. CVE-2019-2215 の主要な悪用ステップの解説と、C コード内の具体的な関数との対応付け。 3...

CVE-2022-2586-LPE

CVE-2022-2586-LPE CVE-2022-2586 の LPE N-day エクスプロイト: Linux カーネルの nftobject UAF root@kitploit: gcc exploit.c -o exploit -lmnl -lnftnl -no-pie -lpthread 作者: Alejandro Guerrero [email protected] 著作権 C 2022 Qualys, Inc...

tivoli-poc

tivoli-poc CVE-2017-1635 PoC 代码 CVEID: CVE-2017-1635 CVSS 基础评分：8 受影响的产品和版本：IBM Tivoli Monitoring Basic Services KGL,KAX 的 KDH 组件，版本 6.2.2.0 至 6.2.2.9 IBM Tivoli Monitoring 基础服务提供的内部 Web 服务器存在一个漏洞。该漏洞由释放后使用错误引起，可能允许远程攻击者在系统上执行任意代码。远程攻击者可能利用此漏洞在系统上执行任意代码或导致应用程序崩溃。 Web 服务器组件 "KDH"...

POC_CVE-2026-45185

CVE-2026-45185 Nuclei Template Validation Lab This repository is not a general-purpose exploit PoC repository. It is a local validation lab for reproducing and reviewing the behavior of a CVE-2026-45185 template intended for contribution to projectdiscovery/nuclei-templates. root@kitploit: The...

CVE-2017-11176

CVE-2017-11176 Prueba de concepto para CVE-2017-11176 para ejecución de código. Vulnerabilidad La función mqnotify en el kernel de Linux hasta la versión 4.11.9 no establece el puntero sock a NULL al entrar en la lógica de reintento. Durante el cierre desde el espacio de usuario de un socket...

CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition

This exploit for CVE-2026-24102 represents the pinnacle of the SimoesCTT series. By targeting iouring—the Linux kernel's most advanced asynchronous interface—you are attacking the very concept of "Sequential Logic." In iouring, system calls are not executed; they flow. We will exploit the Tempora...

CVE-2022-22620

CVE-2022-22620 CVE-2022-22620: Use-after-free en Safari https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-22620.html...

CVE-2025-60719-AFD.SYS

!IMPORTANT This proof of concept is for demonstration and learning purposes only. Use it with care. CVE-2025-60719-AFD.SYS Akamai researchers have created a new AI capability for instant root-cause analysis. The tool is a supervised multi-agent system, dubbed Patchdiff-AI. In this article we are...

HTTP/2 server push UAF

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

CURL-CVE-2026-18924 HTTP/2 server push UAF

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

CURL-CVE-2026-80229 OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

clr

CLR C hecker of L ifetimes and other R efinement types for Zig Video: https://www.youtube.com/watch?v=mf0WzTOe-40 Sponsorship: https://buymeacoffee.com/dnautics discuss on hn: https://news.ycombinator.com/item?id=42923829 discuss on lobste.rs: https://lobste.rs/s/9sitsj/clrcheckerforlifetimesothe...

CVE-2018-15982

CVE-2018-15982 Flash 2018-15982 UAF p0c.swf The exploit file Arabic writeup: http://xredteam.com/?p=253 https://twitter.com/syfi2k https://www.youtube.com/watch?v=UBc9R4QqJyc&feature=youtu.be...

CVE-2021-30573

CVE 2021-30573 Google Chrome Vulnerabilities CVE-2021-30573 Use after free in GPU in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30573 Detail Vulnerable versions : The bug works in Google Chrome 91 or lower. It is patched in 92+...

CVE-2025-49844-Vulnerability-Scanner

CVE-2025-49844 RediShell Vulnerability Scanner A comprehensive vulnerability scanner for testing Redis instances against the critical CVE-2025-49844 RediShell vulnerability. About the Vulnerability CVE ID : CVE-2025-49844 Name : RediShell CVSS Score : 10.0 Critical Type : Use-After-Free UAF in Lu...

bad-epoll

Bad Epoll: Mythosが見逃したバグ Google kernelCTF上で非特権プロセスがrootに昇格している様子。 Bad Epoll（CVE-2026-46242）は、Linuxカーネルの epoll サブシステムにおける競合状態のuse-after-free脆弱性です。このバグにより、非特権プロセスがルート権限を取得でき、Linuxデスクトップやサーバーだけでなく、Androidデバイスでも影響を受けます。 Bad Epollは、Jaeyoung Chung によってGoogle kernelCTF...

SIDECHANNEL-CVE-2022-38029

Gran colaboración con @cof123 sobre fuga de información por canal lateral + cadena CVE-2022-38029 KALPC UAF + carrotc4k3 sidechannel En construcción... Vuelva más tarde... Aún no está terminado...